Cela Link CLR-M20 1.0.6 Information Disclosure

Exploit Title: Cela Link CLR-M20 sw version 1.0.6 - Information Disclosure Date: 2018-12-27 Exploit Author: Mr Winst0n Software Link: http://www.celalink.com Version: 1.0.6 Authentication Required: No Tested on: Linux This vulnerability allows information disclosure by appending...

Cela Link CLR-M20 1.0.6 Authentication Bypass

Exploit Title: Cela Link CLR-M20 sw version 1.0.6 - Authentication Bypass Date: 2018-12-27 Exploit Author: Mr Winst0n Software Link: http://www.celalink.com Version: 1.0.6 Authentication Required: No Tested on: Linux This vulnerability allows attackers to login without enter any information PoC:...

CVE-2018-15137

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

Remote code execution

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

CVE-2018-15137

CeLa Link CLR-M20 devices are affected: unauthorized users can upload arbitrary files (asp, aspx, cfm, html, jhtml, jsp, shtml) via WebDAV PUT, enabling remote code execution. The issue is tied to the WebDAV upload capability, with CVSS metrics indicating a critical impact (CRITICAL, 9.8/10 in CV...

CVE-2018-15137: Unrestricted Upload of File with Dangerous Type

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

CVE-2018-15137

CeLa Link CLR-M20 devices allow unauthorized users to upload any file e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml, which causes remote code execution as well. Because of the WebDAV feature, it is possible to upload arbitrary files by utilizing the PUT method...

Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload

Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload Exploit Title: Cela Link CLR-M20 2.7.1.6 - Arbitrary File Upload Date: 2018-07-13 Shodan Dork: CLR-M20 Exploit Author: Safak Aslan Software Link: http://www.celalink.com Version: 2.7.1.6 CVE: 2018-15137 Authentication Required: No Tested on: Windo...