CVE-2018-14714 PoC — ASUS RT-AC3200 命令注入漏洞

Source

https://github.com/BTtea/CVE-2018-14714-RCE_exploit

Associated Vulnerability

Title:ASUS RT-AC3200 命令注入漏洞 (CVE-2018-14714)
Description:ASUS RT-AC3200是中国台湾华硕（ASUS）公司的一款无线路由器。 ASUS RT-AC3200 3.0.0.4.382.50010版本中的appGet.cgi文件存在命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。

Description

ASUS wifi router RCE vulnerability

Readme

# CVE-2018-14714-RCE_exploit
*ASUS wifi router RCE vulnerability*

**This PoC is for learning and research purposes only. Do not use it for illegal activities; you are solely responsible for any legal consequences.**

* This is a test conducted after code modifications based on this PoC, as the original PoC might have failed due to lacking root permissions.
  * https://github.com/sunn1day/CVE-2018-14714-POC

File Snapshot


 [4.0K]  /data/pocs/54079952cd63bab2c9cc28951d258d54c7f89a8d
├── [3.8K]  CVE-2018-14714-RCE_PoC.py
└── [ 411]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!