{"vulnerability": "cve-2017-7722", "sightings": [{"uuid": "27a70b40-0a93-4435-9b4f-216915f910ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-7722", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "8d13bc85-c07a-4182-bfa2-c8585328408e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-7722", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:00.000000Z"}, {"uuid": "3baef72b-0af3-45e8-9209-4d3ee531b978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-7722", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/solarwinds_lem_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "88be61c5-c44a-4eb1-944d-be8130f9d190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-7722", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/solarwinds_lem_exec.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"Mehmet Ince \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the default credentials of SolarWinds LEM. A menu system is encountered when the SSH\\n          service is accessed with the default username and password which is \\\"cmc\\\" and \\\"password\\\". By exploiting a\\n          vulnerability that exist on the menuing script, an attacker can escape from restricted shell.\\n\\n          This module was tested against SolarWinds LEM v6.3.1.\", \"disclosure_date\": \"2017-03-17\", \"fullname\": \"exploit/linux/ssh/solarwinds_lem_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"SolarWinds LEM Default SSH Password Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/ssh/solarwinds_lem_exec.rb\", \"platform\": \"Python\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/ssh/solarwinds_lem_exec\", \"references\": [\"CVE-2017-7722\", \"URL-http://web.archive.org/web/20250221015511/https://pentest.blog/unexpected-journey-4-escaping-from-restricted-shell-and-gaining-root-access-to-solarwinds-log-event-manager-siem-product/\", \"ATT&CK-T1021.004\"], \"rport\": 32022, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:24.356158Z"}]}