CVE-2024-9643 PoC — Four-Faith F3x36 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9643.yaml

Associated Vulnerability

Title:Four-Faith F3x36 安全漏洞 (CVE-2024-9643)
Description:Four-Faith F3x36是中国四信（Four-Faith）公司的一款便携式无线移动路由器。 Four-Faith F3x36 v2.0.0版本存在安全漏洞，该漏洞源于使用硬编码凭据。攻击者利用该漏洞可以通过特制的 HTTP 请求获得管理访问权限。

Description

Four-Faith F3x36 router with firmware v2.0.0 contains an authentication bypass caused by hard-coded credentials in the administrative web server, letting attackers with knowledge of credentials gain administrative access via crafted HTTP requests.

File Snapshot


 id: CVE-2024-9643

info:
  name: Four-Faith F3x36 - Authentication Bypass
  author: trader642
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!