CVE-2024-48455 PoC — Netis Systems多款产品安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48455.yaml

Associated Vulnerability

Title:Netis Systems多款产品安全漏洞 (CVE-2024-48455)
Description:Netis Systems NX10等都是Netis Systems公司的一款无线双频千兆路由器。 Netis Systems多款产品存在安全漏洞。攻击者利用该漏洞可以通过 skk_get.cgi 组件的 mode_name、wl_link 参数获取敏感信息。以下产品及版本受到影响：Netis Wifi6 Router NX10 2.0.1.3643版本和2.0.1.3582版本、Netis Wifi 11AC Router NC65 3.0.0.3749版本、Netis Wifi 11AC Router

Description

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3.0.0.3800, 3.0.0.3500 and 3.0.0.3329 and Netis Wifi Router MW5360 1.0.1.3442 and 1.0.1.3031 allows a remote attacker to obtain sensitive information via the mode_name, wl_link parameters of the skk_get.cgi component.

File Snapshot


 id: CVE-2024-48455

info:
  name: Netis Wifi Router - Information Disclosure
  author: s4e-io
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-48455 PoC — Netis Systems多款产品 安全漏洞