lukehebe/cve-2018-1049-pocRemote privilege escalation exploit for CVE-2018-1049 targeting VyOS via SSH-based command injection in a sudo-permitted Perl script, granting root access.
This Python script is a custom reimplementation of the Metasploit module exploit for CVE-2018-1049, which targets VyOS (Vyatta) via a privilege escalation vulnerability in a Perl script misused through sudo. You need valid SSH credentials. You gain root via command injection in a sudo-permitted script. Even though it targets a local script, the exploit is launched remotely over SSH. This was for a statewide cybersecurity initiative based on a TTP of the APT Volt Typhoon
