CVE-2020-8655
EyesOfNetwork Improper Privilege Management Vulnerability
Published Feb 6, 2020 · updated Jun 16, 2026 · eyesofnetwork eyesofnetwork
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Timeline
Detection, updates, and resolution for this record.
Feb 6, 2020 · Catalog
Detected
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Required action
Apply updates per vendor instructions.
CISA due date May 3, 2022
Affected
- cpe eyesofnetwork/eyesofnetwork5.3-0
- vendor EyesOfNetwork EyesOfNetworkversion unspecified
Sources
- CISA KEVCVE-2020-8655
EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.
cisa.gov - CVE.orgCVE-2020-8655
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-8655
30-day exploitation probability 60.1%
first.org - Exploit Database48025
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database48169
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_linux/http/eyesofnetwork_autodiscovery_rce
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2020-8655
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com