Eyesofnetwork vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Eyesofnetwork products: 2 record(s), with severity, exploitation and fixes.

Eyesofnetwork 2

Exploited only (KEV) →

CVE-2020-8655 High · 7.8 KEV Urgent · 76 Public exploit CWE-269 Feb 6, 2020

EyesOfNetwork Improper Privilege Management Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

CVE-2020-8657 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-798 Feb 6, 2020

EyesOfNetwork Use of Hard-Coded Credentials Vulnerability

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.