Description
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.
Published: 2024-08-09
Score: 9.8 Critical
EPSS: 74.1% High
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Aug 2024 14:00:00 +0000

Type Values Removed Values Added
First Time appeared Havocframework
Havocframework havoc
CPEs cpe:2.3:a:havocframework:havoc:-:*:*:*:*:*:*:*
Vendors & Products Havocframework
Havocframework havoc

Fri, 09 Aug 2024 20:30:00 +0000

Type Values Removed Values Added
First Time appeared C5pider
C5pider havoc
Weaknesses CWE-918
CPEs cpe:2.3:a:c5pider:havoc:c2_0.74:*:*:*:*:*:*:*
Vendors & Products C5pider
C5pider havoc
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 09 Aug 2024 18:00:00 +0000

Type Values Removed Values Added
Description An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.
References

Subscriptions

C5pider Havoc
Havocframework Havoc
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-09T19:16:18.935Z

Reserved: 2024-07-18T00:00:00.000Z

Link: CVE-2024-41570

cve-icon Vulnrichment

Updated: 2024-08-09T19:15:52.073Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-12T13:38:31.277

Modified: 2024-08-29T13:32:21.020

Link: CVE-2024-41570

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses