CVE-2022-31845 PoC — WAVLINK WN535 G3 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31845.yaml

Associated Vulnerability

Title:WAVLINK WN535 G3 安全漏洞 (CVE-2022-31845)
Description:WAVLINK WN535 G3是中国WAVLINK公司的一个无线路由器。 WAVLINK WN535 G3 M35G3R.V5030.180927版本存在安全漏洞，该漏洞源于live_check.shtml 中存在漏洞。攻击者利用该漏洞通过执行 exec cmd 函数获取敏感的路由器信息。

Description

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to information disclosure in live_check.shtml. An attacker can obtain sensitive router information via execution of the exec cmd function and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations.

File Snapshot


 id: CVE-2022-31845

info:
  name: WAVLINK WN535 G3 - Information Disclosure
  author: arafatansari
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!