Inteno DG301 - Command Injection

No description provided by source...

Inteno DG301 "username" 命令注入漏洞

Inteno DG301是具有高级路由器和网桥功能的家庭网关。 由LuCI Trunk inteno-1.0.34及OpenWrt Backfire 10.03.1-RC6驱动的Inteno DG301在实现上存在命令注入漏洞，未经身份验证的攻击者可直接从Web接口直接登录，利用此漏洞用root权限执行任意命令。 0 inteno DG301 1.0.34 厂商补丁： inteno ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： www.inteno.se http://www.encripto.no/tools/inteno-DG301-PoC.tar...

Inteno DG301 Command Injection

Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command injection, which can be exploited directly...

Inteno DG301 - Command Injection

Inteno DG301 - Command Injection 1. Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command...

Inteno DG301 Command Injection Vulnerability

Exploit for hardware platform in category web applications 1. Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is...

Inteno DG301 - Command Injection

Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command injection, which can be exploited directly...

Inteno DG301 Command Injection

Background According to the vendor, Inteno DG301 is a high-end Multi-WAN residential gateway with advanced router and bridge functions. 2. Summary Inteno DG301 Powered by LuCI Trunk inteno-1.0.34 and OpenWrt Backfire 10.03.1-RC6 is vulnerable to command injection, which can be exploited directly...