GramAddict bot uses dependency with reverse tcp backdoor
Date: 2022-05
Affected: pip/GramAddict
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2020-36245
CWE: CWE-306
CWE-94
CVSS: 8.8 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

GramAddict before 1.2.5 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.


Mitigations:

Architectural layers (MAESTRO):