CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS の認証不要リモートコマンドインジェクション 概要 このリポジトリには、Hytec Inter HWL-2511-SS デバイスにおける重大な脆弱性である CVE-2022-36553 を悪用するための Proof of Concept（PoC）リバースシェルスクリプトが含まれています。このスクリプトは実用的なデモンストレーションであり、私のブログ記事「Hytec Inter HWL-2511-SS - Vulnerability Report」で提供している詳細な分析を補完するものです。 影響を受けるバージ...

Exploit for Command Injection in Hytec Hwl-2511-Ss_Firmware

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remo...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

CVE-2022-36553

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...

CVE-2022-36555

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

Command injection

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

Command injection

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...

CVE-2022-36554

CVE-2022-36554 describes a command-injection vulnerability in the CLI of Hytec Inter HWL-2511-SS, affecting versions 1.05 and below. The issue allows attackers to run arbitrary commands with root privileges via the affected CLI. Public documents in the connected set confirm the vulnerability and ...

CVE-2022-36554

A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...

CVE-2022-36553

Hytec Inter HWL-2511-SS (v1.05 and earlier) is affected by an unauthenticated remote command-injection vulnerability in /www/cgi-bin/popen.cgi. Exploitation could allow arbitrary command execution with high impact on confidentiality, integrity, and availability. Public references (NVD/NIST) docum...

CVE-2022-36553

Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...