Improper Privilege Management in EyesOfNetwork (CVE‑2020‑8655) Enables Root Command Execution via Nmap Script
What It Is – EyesOfNetwork’s web‑based monitoring console contains an improper privilege‑management flaw. An attacker who can run a crafted Nmap Scripting Engine (NSE) script against the service can elevate to root and execute arbitrary commands.
Exploitability – Public proof‑of‑concept exists; the vulnerability is listed in CISA’s Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. CVSS v3.1 base score: 7.5 (High).
Affected Products – EyesOfNetwork (all supported versions as of 2020).
Why It Matters for Trust & Control Assurance
- Tests the access‑control / privilege‑management control objective: organizations must enforce least‑privilege and prevent unauthorized escalation.
- Demonstrates the need for continuous control monitoring – evidence that privileged actions are logged and reviewed.
- Highlights the importance of defensible audit trails; without proper logging, a root‑level breach can evade detection and undermine compliance audits.
Recommended Actions
- Apply the vendor‑released patch for CVE‑2020‑8655 immediately.
- Review and tighten privilege assignments in EyesOfNetwork; enforce least‑privilege for all service accounts.
- Enable and centralise logging of privileged commands; integrate with a SIEM for real‑time alerts.
- Conduct a post‑patch validation scan (e.g., Nmap NSE) to confirm remediation.
- Document the remediation steps as evidence for audit readiness.
Source: CISA KEV – CVE‑2020‑8655