CVE-2017-1000060

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

published July 13, 2017

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

⚡ An unauthenticated SQL injection in EyesOfNetwork (EON) 5.1 could let attackers play puppet master with your database! 🎭 Think of this vulnerability like a restaurant with a hidden backdoor; if a sneaky diner finds it, they can access the kitchen without ever being seen. With the right instructions, they could whip up anything they want from the menu—or worse, change the recipes entirely! An attacker exploiting this flaw could potentially gain remote root access to your entire database. Imagine someone not just viewing your secret recipes but also altering them at will—absolutely disastrous for your system's integrity and confidentiality!

Put simply

Think of this vulnerability like a restaurant with a hidden backdoor; if a sneaky diner finds it, they can access the kitchen without ever being seen. With the right instructions, they could whip up anything they want from the menu—or worse, change the recipes entirely! This vulnerability allows an unauthenticated user to execute SQL commands through the web interface of EyesOfNetwork (EON) 5.1, leading to remote control over the system.

What to do

An attacker exploiting this flaw could potentially gain remote root access to your entire database. Imagine someone not just viewing your secret recipes but also altering them at will—absolutely disastrous for your system's integrity and confidentiality! To guard against this threat, ensure you update EyesOfNetwork (EON) to the latest version that addresses this vulnerability. Additionally, audit your configurations to enforce authentication wherever possible. Don't leave doors unlocked! You've got this! Follow these steps and you'll fortify your system in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03458 · 88.9th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
    cvelistv5