CVE-2022-33174

CVE-2022-33174 Powertek PDU 인증 우회 선택적 인수: -h, --help show this help message and exit -u url, --url url 대상 URL 예:"http://127.0.0.1" -f file, --file file 파일 내 대상 예:"ip.txt" 사용법 python3 CVE-2022-33174.py -u http://127.0.0.1 python3 CVE-2022-33174.py -f ip.txt 링크...

CVE-2022-33174

Summary: CVE-2022-33174 affects Powertek firmware-based Power Distribution Units prior to 3.30.30. An attacker can bypass active session authorization by sending an HTTP request to /cgi/get_param.cgi with the tmpToken cookie set to an empty string followed by a semicolon, enabling access to prote...