CVE-2022-31847 PoC — WAVLINK WN579 X3 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31847.yaml

Associated Vulnerability

Title:WAVLINK WN579 X3 安全漏洞 (CVE-2022-31847)
Description:WAVLINK WN579 X3是中国 WAVLINK公司的一款无线路由器。 WAVLINK WN579 X3 M79X3.V5030.180719版本存在安全漏洞，该漏洞源于/cgi-bin/ExportAllSettings.sh 中存在漏洞。攻击者利用该漏洞通过特制的 POST 请求获取敏感的路由器信息。

Description

WAVLINK WN579 X3 M79X3.V5030.180719 is susceptible to information disclosure in /cgi-bin/ExportAllSettings.sh. An attacker can obtain sensitive router information via a crafted POST request and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations.

File Snapshot


 id: CVE-2022-31847

info:
  name: WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure
  aut

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!