Intrusion PreventionQuest.KACE.Systems.Management.Remote.Command.Injection
Description
This indicates an attack attempt to exploit a Remote Code Execution vulnerability in Quest KACE System Management Appliance.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTTP request. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted HTTP request.
Affected Products
Quest KACE System Management Appliance 7.0.121306 and prior
Quest KACE System Management Appliance 7.1.149 and prior
Quest KACE System Management Appliance 7.2.103 and prior
Quest KACE System Management Appliance 8.0.319 and prior
Quest KACE System Management Appliance 8.1.107 and prior
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.quest.com/kace-systems-management-appliance/kb/254193/security-vulnerability-patch-sec2018_20180410-
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
44950| ID | 46290 |
| Created | Jul 05, 2018 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2018-11139 CVE-2018-11133 CVE-2018-11138 |
| Known Exploited | Yes |
| Exploit Prediction Score | 92.1% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |