DEWESoft X3 - Remote Internal Command Access

This strike exploits a remote internal command access vulnerability in DEWESoft X3. The vulnerability is due to lack of authentication for sessions on TCP port 1999. By exploiting this vulnerability, a remote attacker could run internal commands, including executing arbitrary programs or disabling security features on target system. Note: When run in one-arm mode, this test will launch calc.exe on the target system.