CVE-2021-20150 PoC — Trendnet AC2600 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20150.yaml

Associated Vulnerability

Title:Trendnet AC2600 访问控制错误漏洞 (CVE-2021-20150)
Description:Trendnet AC2600是美国趋势网络（Trendnet）公司的一款无线路由器。 Trendnet AC2600 TEW-827DRU 版本 2.08B01 存在访问控制错误漏洞，用户可以通过手动浏览设置向导并强制其重定向到所需页面来以管理员身份查看信息。

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. A user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page.

File Snapshot


 id: CVE-2021-20150

info:
  name: Trendnet AC2600 TEW-827DRU - Credentials Disclosure
  author: gy74

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!