CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 用の Exploit PoC 説明 CVE-2023-20198 は、不適切なパス検証により Nginx フィルタリングをバイパスし、認証を必要とせずに webuiwsmahttp Web エンドポイントへ到達することを許す脆弱性です。 エンドポイントへの認証をバイパスすることで、攻撃者は任意の Cisco IOS コマンドを実行したり、Privilege 15 の権限で設定変更を行ったりすることができます。 Cisco による、これまで未公開だったこの脆弱性の活発な悪用に関する調査では、脅威アクターがまず...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 CVE-2023-20198용 Exploit PoC 취약점 정보 및 익스플로잇 사용법은 smokeintheshell이 제공함 참고 자료 참조 엔드포인트, HTTP 콘텐츠 유형 및 헤더 관리는 기존의 다른 PoC에서 수정되어 다른 익스플로잇이 실패하는 상황에서도 작동합니다. 설명 CVE-2023-20198은 부적절한 경로 검증으로 인해 인증 없이 Nginx 필터링을 우회하여 webuiwsmahttp 웹 엔드포인트에 도달할 수 있는 취약점입니다. 엔드포인트에 대한 인증을 우회하면...

MTN Group: Cisco IOS XE instance at ████ vulnerable to CVE-██████

A vulnerability was discovered in a Cisco IOS XE instance that allowed bypassing authentication to reach a web endpoint and execute arbitrary Cisco IOS commands or make configuration changes with Privilege 15 privileges. The vulnerability was characterized by improper path validation to bypass...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description...

CVE-2020-8126: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15...

PT-2020-19963

Name of the Vulnerable Software and Affected Versions EdgeSwitch versions prior to 1.7.1 Description A privilege escalation issue exists due to insufficient sanitization of user input by a CGI script, allowing local command execution. This enables an operator user to escalate privileges from...

Cisco Catalyst 2960 IOS 12.2(55)SE1 - ROCEM Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Author: Artem Kondratenko @artkond import socket import sys from time import sleep setcredless = True if lensys.argv 3: print sys.argv0 + ' host --set/--unset' sys.exit elif sys.argv2 == '--unset': setcredless = False elif...

Cisco Catalyst 2960 IOS 12.2(55)SE1 - 'ROCEM' Remote Code Execution

!/usr/bin/python Author: Artem Kondratenko @artkond import socket import sys from time import sleep setcredless = True if lensys.argv 3: print sys.argv0 + ' host --set/--unset' sys.exit elif sys.argv2 == '--unset': setcredless = False elif sys.argv2 == '--set': pass else: print sys.argv0 + ' host...