WID-SEC-W-2024-0215 — Vulnetix

WID-SEC-W-2024-0215 PUBLISHED CVSS 8.699999809265137 HIGH

OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.

Risk Scores

CVSS 4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
	Blue Coat ProxySG 6.5
	Arista EOS <=4.15
	Cisco Unified Communications Manager (CUCM)
	Cisco IronPort Encryption Appliance
	Cisco Media Experience Engine (MXE)
	Cisco Packet Tracer
	Cisco Emergency Responder
	Blue Coat Director 6.1
	Cisco Unified IP Phone
	Cisco TelePresence Server
	Cisco Network Analysis Module
	Cisco Prime Security Manager (PRSM)
	Cisco MDS 9000
	Cisco Digital Media Manager
	Cisco Prime Infrastructure
	Cisco Digital Media Player
	Cisco Nexus 1000V
	Blue Coat ProxySG 6.6
	Blue Coat ProxyAV 3.5

Exploit Intelligence

Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
A practical lab demonstrating the exploitation of a critical Remote Code Execution (RCE) vulnerability in Apache Struts2 (CVE-2017-5638) using Vulhub Docker environments. Includes setup instructions and commands to run the vulnerable container. (github-poc)
ACharaf06/CVE-2017-5638-Attack-and-Defense (github-poc)
CVE-2017-5638- PoC (github-poc)
A hands-on simulation of CVE-2017-5638 (Apache Struts2 RCE), showcasing exploit reproduction, OS-level command execution, and mitigations such as input sanitization and endpoint monitoring. Built in Python/Flask with Jupyter notebook demos (github-poc)
MuhammadAbdullah192/CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION (github-poc)
Apache Struts2 CVE-2017-5638 (Safe Educational Demo) (github-poc)
Real-time anomaly detection system for Apache Struts CVE-2017-5638 exploit using streaming analytics, 3-gram byte analysis, and Count-Min Sketch. Detects RCE attacks without signatures, with <5ms latency and <0.1% false positives. (github-poc)
QHxDr-dz/CVE-2017-5638 (github-poc)

…and 138 more exploits

Timeline

May 3, 2016 CVE Published
Oct 2, 2020 PoC Published
Nov 6, 2020 PoC Published
Sep 6, 2021 PoC Published
Aug 28, 2024 CVE Updated
Oct 9, 2024 PoC Published
Dec 12, 2024 PoC Published
Mar 28, 2025 PoC Published
Sep 26, 2025 PoC Published
Apr 12, 2026 Distribution Patch
Apr 12, 2026 Distribution Patch
Apr 12, 2026 Distribution Patch

References

…and 35 more

Open in Interactive Console →

$ Console Community · 100/wk Open console ›