CVE-2020-24579 PoC — D-link DSL-2888A 授权问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24579.yaml

Associated Vulnerability

Title:D-link DSL-2888A 授权问题漏洞 (CVE-2020-24579)
Description:D-link DSL-2888A是中国D-link公司的一款统一服务路由器。 D-Link DSL-2888A devices 存在授权问题漏洞，该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。

Description

D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55 are vulnerable to authentication bypass issues which can lead to remote command execution. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality.

File Snapshot


 id: CVE-2020-24579

info:
  name: D-Link DSL 2888a - Authentication Bypass/Remote Command Execution


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!