{"cve":"CVE-2020-7385","nvd":{"published":"2021-04-23T16:15:08.440","modified":"2026-06-17T03:24:47.763","status":"Modified","description":"By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with elevated privileges, this can lead to a system compromise on the Metasploit workstation. Note that an attacker would have to lie in wait and entice the Metasploit user to run the affected module against a malicious endpoint in a \"hack-back\" type of attack. Metasploit is only vulnerable when the drb_remote_codeexec module is running. In most cases, this cannot happen automatically.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":8.8},"cwes":["CWE-502"],"references":["https://github.com/rapid7/metasploit-framework/pull/14300","https://github.com/rapid7/metasploit-framework/pull/14335","https://help.rapid7.com/metasploit/release-notes/archive/2020/10/","https://github.com/rapid7/metasploit-framework/pull/14300","https://github.com/rapid7/metasploit-framework/pull/14335"],"products":["rapid7:metasploit"],"source":"nvd","synced_at":"2026-10-19T21:17:01.373894544+00:00"},"epss":{"cve":"CVE-2020-7385","score":0.0175,"percentile":0.77862,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-xgww-h98f-24qf","url":"https://osv.dev/vulnerability/GHSA-xgww-h98f-24qf","summary":"Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module","modified":"2023-11-08T04:03:59.391180Z","packages":[{"ecosystem":"RubyGems","name":"metasploit-framework","purl":"pkg:gem/metasploit-framework","ranges":["<4.19.0"],"fixed":["4.19.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}