Detections
Analytics
Energizer DUO USB Battery Charger Software Backdoor (credentialed check)
critical Nessus Plugin ID 45006
Language:
Synopsis
The remote Windows host has a backdoor.Description
The remote Windows host includes an install of the Energizer DUO software, likely included with a Energizer DUO USB battery charger to allow a user to view the battery charging status.The installed version of this software includes the Arugizer backdoor (Arucer.dll), which is reported to have been distributed with the Energizer DUO software.
An unauthenticated, remote attacker who connects to this port can use the backdoor to list directories, send and receive files, and execute programs.
Solution
Verify whether the remote host has been compromised and reinstall the operating system if necessary.See Also
Plugin Details
Severity: Critical
ID: 45006
File Name: energizer_duo_arugizer_backdoor.nasl
Version: 1.11
Type: local
Family: Backdoors
Published: 3/8/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 9.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 3/5/2010
Exploitable With
Metasploit (Energizer DUO USB Battery Charger Arucer.dll Trojan Code Execution)
Reference Information
CVE: CVE-2010-0103
BID: 38571