CVE-2021-43469 PoC — VENGA 路由器 命令注入漏洞

Description

CVE-2021-43469

介绍

# CVE-2021-43469
![image](https://user-images.githubusercontent.com/72059221/144845110-cc77bcfb-d503-4b36-8be5-d428a5ce004e.png)


### Exploit Title: VINGA router has weak passwords and background command execution vulnerabilities.
### product: VINGA WR-N300U 
### webserver: goahead
### Author: CXAQHQ
### TIME: 2021-11-01

### Command execution vulnerabilities exist on the Ping and traceroute interfaces after login.
### Run the IP addr command
![avatar](post.jpg)
![avatar](222.png)


### IDA looks at the vulnerability code
![avatar](333.png)

文件快照

备注