CVE-2021-46422 PoC — Telesquare SDT-CW3B1 操作系统命令注入漏洞

Source

https://github.com/tucommenceapousser/CVE-2021-46422

Associated Vulnerability

Title:Telesquare SDT-CW3B1 操作系统命令注入漏洞 (CVE-2021-46422)
Description:Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.

Readme

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

CVE-2021-46422

Usage: 


```bash

   _______    ________    ___   ____ ___  ___      __ __  _____ __ __ ___  ___      
  / ____/ |  / / ____/   |__ \ / __ \__ \<  /     / // / / ___// // /|__ \|__ \     
 / /    | | / / __/________/ // / / /_/ // /_____/ // /_/ __ \/ // /___/ /__/ /     
/ /___  | |/ / /__/_____/ __// /_/ / __// /_____/__  __/ /_/ /__  __/ __// __/      
\____/  |___/_____/    /____/\____/____/_/        /_/  \____/  /_/ /____/____/      
                                                                                    

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection [ Valentin Lobstein ]

usage: exp.py [-h] [-u URL] [-f FILE] [-c COMMAND]

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target URL/IP
  -f FILE, --file FILE  Target file
  -c COMMAND, --command COMMAND
                        Command
  ```
   
  
 

### Zoomeye CLI Dork:

```bash

zoomeye search 'title:"Login to SDT-CW3B1"'  -num 1500  -filter=ip,port 

```

### Shodan CLI Dork:

```bash

shodan search 'title:"Login to SDT-CW3B1"' --fields=ip_str,port --separator ":" --limit 1000 | grep '' | sed 's/.$//'

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →