CVE-2021-35336 PoC — Tieline IP Audio Gateway 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35336.yaml

Associated Vulnerability

Title:Tieline IP Audio Gateway 访问控制错误漏洞 (CVE-2021-35336)
Description:IP Audio Gateway是Tieline的一个音频编解码器。 Tieline IP Audio Gateway存在访问控制错误漏洞，该漏洞源于Tieline Web Administrative Interface中的漏洞可能允许未经身份验证的用户使用高特权帐户访问系统的敏感部分。

Description

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account.

File Snapshot


 id: CVE-2021-35336

info:
  name: Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Pan

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!