CVE-2023-40930

介绍 这是一个关于如何搭建 CVE-2023-40930 复现环境的介绍 在 "issue detail.pdf" 中了解更多关于此 CVE 问题的信息 搭建 概述 你可以使用树莓派 Pi Zero 2W 或其他 ARM64（ARM32 也可）架构的设备来搭建这个环境，也可以在已 root 的 Android 设备上搭建。 如何搭建 针对非安卓设备 创建目录路径 "/system/lib"，并将本程序中的 "lib" 目录复制到 /system/lib。 然后创建目录路径 "/system/bin"，并将 "blkid" 和 "linker" 复制到此路径。 之后，插入你的恶意 U 盘并...

CVE-2023-40930

An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/...

CVE-2023-40930

An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/...

CVE-2023-40930

CVE-2023-40930 affects Skyworth OS v3.0; the issue is a directory traversal in /system/bin/blkid allowing an attacker to read arbitrary files by mounting a Udisk to /mnt. The Red Hat/NVD/CVE entries confirm Skyworth v3.0 as affected with path traversal in that directory (no exploit details provid...

CVE-2023-40930

An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/...

CVE-2023-40930

creationtimestamp| type| source ---|---|--- 2023-09-07 17:00:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5103 2023-09-08 18:07:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8988 2023-09-15 03:37:09+00:00| published-proof-of-concept|...