Eyesofnetwork vulnerabilities
We track 3 vulnerabilities in Eyesofnetwork products. 3 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on January 7, 2025.
Latest Eyesofnetwork vulnerabilities
- 9.8 Critical severity
Eyesofnetwork: Incorrect Default Permissions
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.
- 7.8 High severity
EyesOfNetwork Improper Privilege Management Exploited
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
- 9.8 Critical severity
EyesOfNetwork Use of Hard-Coded Credentials Exploited
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access t