gxv3175-remote-code-exec

Esecuzione remota di codice per il telefono VOIP Grandstream GXV3175. === INSTALLAZIONE === Copia i file nella stessa struttura di directory sotto la directory di livello principale di metasploit === USO === nella msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1...

Grandstream GXV3175 Unauthenticated Command Execution Exploit

This Metasploit module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The settimezone action does not validate input in the timezone parameter allowing injection of arbitrary commands. A buffer overflow in the phonecookie cookie parsing allows authenticati...

Grandstream GXV3175 'settimezone' Unauthenticated Command Execution

This module exploits a command injection vulnerability in Grandstream GXV3175 IP multimedia phones. The 'settimezone' action does not validate input in the 'timezone' parameter allowing injection of arbitrary commands. A buffer overflow in the 'phonecookie' cookie parsing allows authentication to...