Sploitus

Exploit for CVE-2019-5544_CVE-2020-3992

CVE-2019-5544CVE-2020-3992CVE-2021-21974

kitploit Β· 2026-08-19

Exploit Code

MARKDOWN34 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HYNEKPETRAK-CVE-2019-5544_CVE-2020-3992
# SLP μ„œλΉ„μŠ€ μŠ€μΊλ„ˆ (CVE-2019-5544 CVE-2020-3992)

SRVLOC/SLP ν”„λ‘œν† μ½œμ„ κ΅¬ν˜„ν•˜μ—¬ ν™œμ„±ν™”λœ OpenSLP μ„œλΉ„μŠ€λ₯Ό μŠ€μΊ”ν•˜λŠ” Python μŠ€ν¬λ¦½νŠΈμž…λ‹ˆλ‹€.

CVE-2019-5544, CVE-2020-3992 λ˜λŠ” CVE-2021-21974의 영ν–₯을 λ°›λŠ” μ‹œμŠ€ν…œμ„ 검색할 λ•Œ μœ μš©ν•˜κ²Œ μ‚¬μš©ν•  수 μžˆμŠ΅λ‹ˆλ‹€...

VMware 취약점에 λŒ€ν•œ μžμ„Έν•œ μ •λ³΄λŠ” 예λ₯Ό λ“€μ–΄ λ‹€μŒμ—μ„œ 확인할 수 μžˆμŠ΅λ‹ˆλ‹€: https://blog.rapid7.com/2020/11/11/vmware-esxi-openslp-remote-code-execution-vulnerability-cve-2020-3992-and-cve-2019-5544-what-you-need-to-know/

이 μŠ€ν¬λ¦½νŠΈλŠ” μ„œλΉ„μŠ€κ°€ μ·¨μ•½ν•œμ§€ μ—¬λΆ€λ₯Ό κ°μ§€ν•˜μ§€ μ•Šμ§€λ§Œ 원격 VMWare 버전과 λΉŒλ“œλ₯Ό λ³΄κ³ ν•©λ‹ˆλ‹€.

## μš”κ΅¬ 사항

python3와 scapy λΌμ΄λΈŒλŸ¬λ¦¬κ°€ μ„€μΉ˜λ˜μ–΄ μžˆμ–΄μ•Ό ν•©λ‹ˆλ‹€. 즉, `pip3 install scapy`

## μ‚¬μš©λ²•

root@kitploit:~
    
    
    ./check_slp.py <file_with_targets>
    

μ—¬κΈ°μ„œ μΈμžλŠ” IP μ£Όμ†Œ λ˜λŠ” CIDR ν‘œκΈ°λ²•μ˜ λ„€νŠΈμ›Œν¬ λͺ©λ‘μ΄ λ‹΄κΈ΄ νŒŒμΌμž…λ‹ˆλ‹€.

## 좜λ ₯

root@kitploit:~
    
    
    2020-12-01 15:03:15,654 - INFO - [ip_removed] Sending packet via Unicast UDP
    2020-12-01 15:03:15,778 - INFO - [ip_removed] SLP Service detected
    2020-12-01 15:03:16,032 - INFO - [ip_removed] ATTR    service:VMwareInfrastructure://[fqdn_removed]      (product="VMware ESXi 6.5.0 build-17097218"),(hardwareUuid="30313436-3631-584D-5133-343230505032")
    2020-12-01 15:03:16,292 - INFO - [ip_removed] ATTR    service:wbem:https://[fqdn_removed]:5989   (MultipleOperationsSupported=false),(AuthenticationMechanismsSupported=Basic),(Namespace=root/interop,interop,root/hpq,root/cimv2,root/config,vmware/esxv2),(Namespace=root/cimv2,root/interop,root/config,vmware/esxv2),(Classinfo=0,0,0,0),(ProtocolVersion=1.0),(RegisteredProfilesSupported=DMTF:Sensors,DMTF:Base Server,DMTF:Power State Management,DMTF:CPU,DMTF:Software Inventory,DMTF:Record Log,DMTF:System Memory,DMTF:Physical Asset,DMTF:Fan,DMTF:Power Supply,DMTF:Profile Registration,DMTF:Battery,)