Description
unRAID®是一种嵌入式操作系统,旨在为您提供对硬件的最终控制。除了执行功能强大的NAS(网络附加存储)的功能外。其旧版本存在权限绕过与远程代码执行漏洞。
Unraid <= 6.8.0 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/868cc84f-3c40-4ceb-bc46-ba3ecae2a563
https://avd.aliyun.com/detail?id=AVD-2020-5847
https://sysdream.com/news/lab/2020-02-06-cve-2020-5847-cve-2020-5849-unraid-6-8-0-unauthenticated-remote-code-execution-as-root/
https://nvd.nist.gov/vuln/detail/CVE-2020-5847
https://www.exploit-db.com/exploits/48353
https://www.cvedetails.com/cve/CVE-2020-5847/
https://github.com/advisories/GHSA-4m4g-xmmp-5cj6
https://forums.unraid.net/topic/88253-critical-security-vulnerabilies-discovered/