CVE-2019-5645
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A vulnerability in Rapid7 Metasploit allows an attacker to register an arbitrary regular expression by sending a specially crafted HTTP GET request to a listening Metasploit HTTP handler. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established or cause resource exhaustion on the Metasploit server.
Risk Assessment
An attacker can cause a denial of service (DoS) on the Metasploit server by blocking new sessions or exhausting resources, disrupting offensive operations or penetration tests.
Recommendation
Update Metasploit to a patched version or restrict access to HTTP handlers to trusted networks only.
Other vulnerabilities in Rapid7 Metasploit
See all- CVE-2017-5231High
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
- CVE-2017-5229High
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
- CVE-2017-5228High
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Original NVD description (English source)
By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS