What is CVE-2012-5693?

CVE-2012-5693 is a high-severity vulnerability in Bulbsecurity Smartphone Pentest Framework, classified under OS Command Injection. CVSS score: 8.8/10. Published 2020-01-03.

How severe is CVE-2012-5693?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Bulbsecurity Smartphone Pentest Framework

CVE-2012-5693

Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename parameter to (3) CSAttack.pl or (4) SEAttack.pl in frameworkgui/; the phNo2Attack parameter to (5) CSAttack.pl or (6) SEAttack.pl in frameworkgui/; the (7) platformDD2 parameter to frameworkgui/SEAttack.pl; the (8) agentURLPath or (9) agentControlKey parameter to frameworkgui/attach2agents.pl; or the (10) controlKey parameter to frameworkgui/attachMobileModem.pl. NOTE: The hostingPath parameter to CSAttack.pl and SEAttack.pl vectors and the appURLPath parameter to attachMobileModem.pl vector are covered by CVE-2012-5878.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.017 (74.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bulbsecurity Smartphone_pentest_framework
N/a — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2012-5693?: CVE-2012-5693 is a high-severity vulnerability in Bulbsecurity Smartphone Pentest Framework, classified under OS Command Injection. CVSS score: 8.8/10. Published 2020-01-03.
How severe is CVE-2012-5693?: High severity. CVSS v3 base score is 8.8 out of 10.