Actively exploited in the wild
EyesOfNetwork Improper Privilege Management Vulnerability
EyesOfNetwork - EyesOfNetwork · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-8655
HighCVSS 7.8KEVSummary
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Risk Assessment
An attacker could exploit this to gain root privileges, leading to full system compromise.
Recommendation
Update EyesOfNetwork to a version that fixes this vulnerability or modify the sudoers configuration to restrict the apache user's privileges.
Other vulnerabilities in EyesOfNetwork
Original NVD description (English source)
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.