CVE-2021-46422 PoC — Telesquare SDT-CW3B1 操作系统命令注入漏洞

Source

https://github.com/5l1v3r1/CVE-2021-46422

Associated Vulnerability

Title:Telesquare SDT-CW3B1 操作系统命令注入漏洞 (CVE-2021-46422)
Description:Telesquare SDT-CW3B1是韩国Telesquare公司的一款无线路由器。 Telesquare SDT-CW3B1 1.1.0 版本存在安全漏洞，该漏洞源于操作系统命令注入。远程攻击者利用此漏洞无需任何身份验证即可执行操作系统命令。

Description

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

Readme

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422

Usage: 


```bash

   _______    ________    ___   ____ ___  ___      __ __  _____ __ __ ___  ___      
  / ____/ |  / / ____/   |__ \ / __ \__ \<  /     / // / / ___// // /|__ \|__ \     
 / /    | | / / __/________/ // / / /_/ // /_____/ // /_/ __ \/ // /___/ /__/ /     
/ /___  | |/ / /__/_____/ __// /_/ / __// /_____/__  __/ /_/ /__  __/ __// __/      
\____/  |___/_____/    /____/\____/____/_/        /_/  \____/  /_/ /____/____/      
                                                                                    

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection [ Valentin Lobstein ]

usage: exp.py [-h] [-u URL] [-f FILE] [-c COMMAND]

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target URL/IP
  -f FILE, --file FILE  Target file
  -c COMMAND, --command COMMAND
                        Command
  ```
   
  
 

### Zoomeye CLI Dork:

```bash

zoomeye search 'title:"Login to SDT-CW3B1"'  -num 1500  -filter=ip,port 

```

### Shodan CLI Dork:

```bash

shodan search 'title:"Login to SDT-CW3B1"' --fields=ip_str,port --separator ":" --limit 1000 | grep '' | sed 's/.$//'

```

File Snapshot


 [4.0K]  /data/pocs/35c20d5ddf103b90d777713f6ec3a366984a2438
├── [4.1K]  exp.py
├── [ 447]  parser_zoomeye.py
└── [1.2K]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!