CVE-2022-1077 PoC — TEM FLEX-1080 和 TEM FLEX-1085 信息泄露漏洞

Source

https://github.com/MrEmpy/CVE-2022-1077

Associated Vulnerability

Title:TEM FLEX-1080 和 TEM FLEX-1085 信息泄露漏洞 (CVE-2022-1077)
Description:TEM FLEX-1080和TEM FLEX-1085都是巴西TEM公司的一个家用 WiFi 报警器套件。 TEM FLEX-1080 和 FLEX-1085 1.6.0 中存在安全漏洞，该漏洞源于组件Log Handler的log.cgi中的信息泄露。

Description

TEM FLEX-1080/FLEX-1085 1.6.0 log log.cgi Information Disclosure

Readme

<h1 align="center">CVE-2022-1077</h1>

<h2 align="center">Description</h2>

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.

![](1.png)

<h2 align="center">Usage</h2>

```
$ git clone https://github.com/MrEmpy/CVE-2022-1077.git
$ cd CVE-2022-1077
$ chmod +x cve-2022-1077.py
$ ./cve-2022-1077.py -u http://<IP>
```

<h2 align="center">Reference</h2>

* https://vuldb.com/?id.194848

File Snapshot


 [4.0K]  /data/pocs/6b043032ed03bb802093446571593c637f775f1c
├── [ 41K]  1.png
├── [2.1K]  cve-2022-1077.py
└── [ 652]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!