CVE Feed

    Dashboard / CVE / CVE-2020-8655

    CVE-2020-8655

    An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

    Published:Feb 6, 2020
    Last Modified:Nov 10, 2025
    EPS:Feb 6, 2020
    EPSS Score:0.82202
    CVSS Score:7.8

    CISA Notification

    Description

    An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Eyesofnetwork
    Product
    Eyesofnetwork

    Exploits

    http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlhttps://github.com/EyesOfNetworkCommunity/eonconf/issues/8http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlhttps://github.com/EyesOfNetworkCommunity/eonconf/issues/8https://www.exploit-db.com/exploits/48169https://www.exploit-db.com/exploits/48025

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2022-41572 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the…
    CVE-2022-41571 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.…
    CVE-2022-41570 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.…
    CVE-2021-40643 (CVSS 9.8) — EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration pa…
    CVE-2022-24612 (CVSS 5.4) — An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, re…
    CVE-2021-33525 (CVSS 8.8) — EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacha…
    CVE-2021-27513 (CVSS 8.8) — The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php f…
    CVE-2021-27514 (CVSS 9.8) — EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged f…
    CVE-2020-27887 (CVSS 8.8) — An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileg…
    CVE-2020-27886 (CVSS 9.8) — An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQ…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High