Exploit for CVE-2020-16898

gitee · 2020-10-18

Description

Exploit module targets Apache Log4j for remote code execution via exploit.py on vulnerable versions.

Affected software

Microsoft Windows 10= 1709, 1803, 1809, 1903, 1909, 2004

Microsoft Windows Server 2016= 1903, 1909, 2004

Microsoft Windows Server 2019 All versions

All known vulnerabilities by product

Windows Windows Tcp/Ip Stack

CVSS 8.8 for CVE-2020-16898

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:ADJACENT

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

52%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

9.8%higher than 95.0% of all CVEs

Updated 2026-07-31

CVE Information

Exploit Details

Modified:2020-10-18 19:46

Last Seen:2025-09-11 08:25

Reporter:zhuzhuxia

Tags

Apache Log4jremote code executionexploit moduleexploit.pyvulnerable versions

Other exploits for CVE-2020-16898

Exploit for CVE-2020-16898

2021-01-24 NULLGITEE

Exploit for CVE-2020-16898

2020-11-17 glthubGITEE

Exploit for CVE-2020-16898

2020-10-28 komomonGITHUB

Exploit for CVE-2020-16898

2020-10-20 komomonGITHUB

Exploit for CVE-2020-16898

2020-10-19 KeyBoxDZDGITEE

Exploit for CVE-2020-16898

2020-10-17 CPO-EHGITHUB

Exploit for CVE-2020-16898

2020-10-16 0xeb-bpGITHUB

Exploit for CVE-2020-16898

2020-10-16 Q1984GITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=27B3740D-8373-51F7-9E08-18C308A3A41B
It is an exploit module targeting Apache Log4j. The vulnerability class/vector is RCE (Remote Code Execution). The probable entry point is the "exploit.py" script. Not specified. Preconditions are a vulnerable version of Apache Log4j. The expected impact is RCE.