CVE-2022-33174

CVE-2022-33174 Powertek PDU bypass de identidad Argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u url, --url url URL objetivo, ej.: "http://127.0.0.1" -f file, --file file Objetivos en un archivo, ej.: "ip.txt" Uso python3 CVE-2022-33174.py -u http://127.0.0.1 python3...

CVE-2022-33174

Summary: CVE-2022-33174 affects Powertek firmware-based Power Distribution Units prior to 3.30.30. An attacker can bypass active session authorization by sending an HTTP request to /cgi/get_param.cgi with the tmpToken cookie set to an empty string followed by a semicolon, enabling access to prote...