CVE-2018-6892 EXPLOIT
9.8
CRITICAL · CVSS 3.0 · EPSS 93.4% (pctl 100)
Patch early
A public exploit exists.
Description
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 93.39% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2018-02-11 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| cloudme | sync |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | CloudMe Sync 1.11.2 Buffer Overflow - WoW64 (DEP Bypass) | 2019-01-28 |
| exploit-db | Cloudme 1.9 - Buffer Overflow (DEP) (Metasploit) | 2018-08-14 |
| exploit-db | CloudMe Sync 1.10.9 - Stack-Based Buffer Overflow (Metasploit) | 2018-02-26 |
| exploit-db | CloudMe Sync < 1.11.0 - Buffer Overflow | 2018-02-13 |
References
- http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt
- http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html
- http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html
- http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html
- https://blogs.securiteam.com/index.php/archives/3669
- https://www.exploit-db.com/exploits/44027/
- https://www.exploit-db.com/exploits/44175/
- https://www.exploit-db.com/exploits/45197/
- https://www.exploit-db.com/exploits/46250/
- https://www.exploit-db.com/exploits/48840
- http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt
- http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html
- http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html
- http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html
- https://blogs.securiteam.com/index.php/archives/3669
- https://www.exploit-db.com/exploits/44027/
- https://www.exploit-db.com/exploits/44175/
- https://www.exploit-db.com/exploits/45197/
- https://www.exploit-db.com/exploits/46250/
- https://www.exploit-db.com/exploits/48840
→ the Explorer · watch your stack · NVD