CVE-2022-39952 PoC — Fortinet FortiNAC 安全漏洞

Source

https://github.com/shiyeshu/CVE-2022-39952_webshell

Associated Vulnerability

Title:Fortinet FortiNAC 安全漏洞 (CVE-2022-39952)
Description:Fortinet FortiNAC是美国飞塔（Fortinet）公司的一种零信任访问解决方案。 Fortinet FortiNAC存在安全漏洞。攻击者利用该漏洞通过特制的HTTP请求执行未经授权的代码或命令。以下版本受到影响：9.4.0版本、9.2.0版本至9.2.5版本、9.1.0版本至9.1.7版本、8.8.0版本至8.8.11版本、8.7.0版本至8.7.6版本、8.6.0版本至8.6.5版本、8.5.0版本至8.5.4版本、8.3.7版本。

Description

Write Behinder_webshell to target using CVE-2022-39952

Readme

#### Write Behinder_webshell to target using CVE-2022-39952



File Address: https://xx.xx.xx.xx:8443/shell.jsp

password:rebeyond

Version used: Behinder_v3.0



Script improvement from: https://github.com/horizon3ai/CVE-2022-39952

File Snapshot


 [4.0K]  /data/pocs/4101fac0aa4921bebc0f598e6796060c32497372
├── [ 925]  CVE-2022-39952_webshell.py
├── [ 537]  payload
└── [ 240]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!