CVE-2021-20158 PoC — Trendnet AC2600 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20158.yaml

Associated Vulnerability

Title:Trendnet AC2600 访问控制错误漏洞 (CVE-2021-20158)
Description:Trendnet AC2600是美国趋势网络（Trendnet）公司的一款无线路由器。 Trendnet AC2600 TEW-827DRU 版本 2.08B01 存在访问控制错误漏洞，该漏洞源于隐藏的管理命令，未经身份验证的恶意行为者可能会强制更改管理员密码。

Description

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicious actor to force change the admin password due to a hidden administrative command.

File Snapshot


 id: CVE-2021-20158

info:
  name: Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password Change
  autho

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!