CVE-2024-7332 PoC — TOTOLINK CP450 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7332.yaml

Associated Vulnerability

Title:TOTOLINK CP450 安全漏洞 (CVE-2024-7332)
Description:TOTOLINK CP450是中国吉翁电子（TOTOLINK）公司的一款户外无线客户终端设备。主要用于提供无线宽带接入服务，尤其适用于农村或偏远地区的无线网络覆盖。 TOTOLINK CP450 4.1.0cu.747_B20191224版本存在安全漏洞，该漏洞源于使用硬编码密码。

Description

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747_B20191224. This vulnerability affects an unknown part of the file /web_cste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely without any user interaction.

File Snapshot


 id: CVE-2024-7332

info:
  name: TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnera

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!