Description
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Quest KACE Systems Management Command Injection
exploit/unix/http/quest_kace_systems_management_rce
Exploit-DB 1
- Quest KACE Systems Management - Command Injection (Metasploit) EDB-44950 · remote · Jun 27, 2018 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Quest KACE System Management Appliance 8.0.318 - Remote Code Execution http/cves/2018/CVE-2018-11138.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.