An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
| CVE | CVE-2018-6892 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 93.4% en 30 días (percentil 100) |
| CWE | CWE-119 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
| PoC público | github.com, github.com, github.com |
Productos afectados (catálogo NVD)
cloudme/sync