Eyesofnetwork: community verdicts
2 notable / known-exploited Eyesofnetwork CVEs the community has triaged.
ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Eyesofnetwork CVE, see NVD ↗.
- CVE-2020-8657CRIT 9.8KEVEPSS 92%
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.
- CVE-2020-8655HIGH 7.8KEVEPSS 60%
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.