CiscoExploit

CiscoExploit 시스코 스캔 IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure 원격 코드 실행 https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...

CVE-2019-1653

CVE-2019-1653 Cisco Small Business RV320 및 RV325 듀얼 기가비트 WAN VPN 라우터의 웹 기반 관리 인터페이스에서 발견된 취약점으로, 인증되지 않은 원격 공격자가 민감한 정보를 검색할 수 있습니다. 이 간단한 Python 스크립트는 CVE-2019-1653에 대한 자동화 익스플로잇으로, Cisco Small Business RV320 및 RV325 장치를 감염시킵니다. 첫 번째로 악용되는 취약점은 SIE민감한 정보 노출, Sensitive Information Exposures로, 인증되...

CiscoSpill

CiscoSpill CVE-2019-1653을 사용하여 비밀번호를 추출하는 PoC 도구입니다. CVE-2019-1653 Cisco Small Business RV320 및 RV325 Dual Gigabit WAN VPN 라우터의 웹 기반 관리 인터페이스에서 취약점이 발견되어 인증되지 않은 원격 공격자가 민감한 정보를 검색할 수 있습니다. 이 취약점은 URL에 대한 부적절한 접근 제어로 인해 발생합니다. 공격자는 HTTP 또는 HTTPS를 통해 영향을 받는 장치에 연결하고 특정 URL을 요청하여 이 취약점을 악용할 수 있습니다...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Cisco RV320 설정 덤프 및 RCE 획득을 위한 익스플로잇 Red Team Pentesting GmbH가 공개한 CVE-2019-1652 및 CVE-2019-1653 익스플로잇의 구현체입니다. RV320에서만 테스트했지만, Cisco 권고에 따르면 RV325도 취약합니다. 다음 Shodan 쿼리로 찾을 수 있는 것 같습니다. 얼마나 많은지 궁금하시다면요. 꽤 많은 것 같습니다... ssl:RV320 ssl:RV325 port:161 RV325...

nuclei-CiscoRV320Dump-CVE-2019-1653

Cisco Router Configuration Exposure Vulnerability 취약점 설명 이 저장소는 특정 Cisco 라우터에서 config.exp 구성 파일이 공개적으로 접근 가능한 URL을 통해 노출되는 취약점의 악용 과정을 자세히 설명합니다. 이 파일에는 자격 증명USERNAME 및 PASSWD, 네트워크 구성 및 기타 중요한 시스템 세부 정보를 포함한 민감한 정보가 포함될 수 있습니다. 인증 없이 접근 가능할 경우 장치 및 해당 장치가 배포된 네트워크의 보안을 손상시킬 수 있습니다. 관련 CVE 이 취약점은...

Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

CVE-2024-20523

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20519

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20519

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20524 Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20524

CVE-2024-20524 affects Cisco Small Business RV042, RV042G, RV320, and RV325 routers. Root cause: improper validation of user input in incoming HTTP packets in the web-based management interface. Impact: authenticated Administrators can trigger an unexpected device reload, causing DoS (availabilit...

CVE-2024-20523 Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20521 Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20520 Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20519 Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20518 Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

CVE-2024-20517 Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20523: Stack-based Buffer Overflow

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service DoS condition. To exploit...

CVE-2024-20521: Stack-based Buffer Overflow

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...