KEVIntel
9.8
CVSS
Critical

CVE-2017-1000486

PUBLISHED

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

Exploited in the wild Remote Low complexity No user interaction
Vendor
Primetek
Product
Primefaces
Published
Jan 03, 2018
EPSS

Description

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

cisa nuclei_scanner metasploit

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitation status

Exploited in the wild

Recorded 2022-01-10 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
total

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Jan 10, 2022
CISA Jan 10, 2022

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

primefaces_weak_encryption_rce

metasploit · Created Unknown

Metasploit module for CVE-2017-1000486

LongWayHomie/CVE-2017-1000486

github · Created 2023-12-15 00:04:21 UTC · 0 stars

Remote Code Execution exploit for PrimeFaces 5.x - EL Injection (CVE-2017-1000486)

Pastea/CVE-2017-1000486

github · Created 2021-08-05 17:42:54 UTC · 3 stars

mogwailabs/CVE-2017-1000486

github · Created 2018-10-17 22:47:30 UTC · 9 stars

Proof of Concept Exploit for PrimeFaces 5.x EL Injection (CVE-2017-1000486)

pimps/CVE-2017-1000486

github · Created 2018-09-03 03:11:24 UTC · 90 stars

Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Added to KEVIntel

  • Detected by Nuclei

  • Detected by Metasploit