CVE-2024-57045 PoC — D-Link DIR-859 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57045.yaml

Associated Vulnerability

Title:D-Link DIR-859 安全漏洞 (CVE-2024-57045)
Description:D-Link DIR-859是中国友讯（D-Link）公司的一款无线路由器。 D-Link DIR-859 v1.05版本及之前版本存在安全漏洞。攻击者利用该漏洞可以通过伪造对/getcfg.php页面的post请求来获取用户名和密码。

Description

A critical information disclosure vulnerability exists in D-Link devices where sensitive device account information including credentials can be retrieved by sending an unauthenticated request to `/getcfg.php` endpoint with the parameter `SERVICES=DEVICE.ACCOUNT`. This could allow attackers to obtain administrative credentials and gain full control of the affected device.

File Snapshot


 id: CVE-2024-57045

info:
  name: D-Link DIR-859 - Information Disclosure
  author: ritikchaddha
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!