CVE-2024-54764 PoC — ipTIME A2004 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54764.yaml

Associated Vulnerability

Title:ipTIME A2004 安全漏洞 (CVE-2024-54764)
Description:ipTIME A2004是韩国ipTIME公司的一款路由器。 ipTIME A2004 v12.17.0版本存在安全漏洞，该漏洞源于访问控制不当。攻击者利用该漏洞可以获取敏感信息。

Description

An access control issue exists in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 that allows attackers to obtain sensitive information without authentication. The vulnerability allows unauthenticated access to device settings and configuration information.

File Snapshot


 id: CVE-2024-54764

info:
  name: ipTIME A2004 - Unauthorized Access
  author: ritikchaddha
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!