CVE-2024-3080 PoC — ASUS Router 授权问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3080.yaml

Associated Vulnerability

Title:ASUS Router 授权问题漏洞 (CVE-2024-3080)
Description:ASUS routers是中国华硕（ASUS）公司的一款路由器APP。 ASUS Router存在授权问题漏洞，该漏洞源于允许远程攻击者登录设备。

Description

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue affecting multiple ASUS router models.

File Snapshot


 id: CVE-2024-3080

info:
  name: ASUS DSL-AC88U - Authentication Bypass
  author: ritikchaddha
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.