CVE-2022-37122-Exploit

CVE-2022-37122 路径遍历扫描器 一个功能强大且丰富的扫描器，用于检测 Carel pCOWeb logdownload.cgi 路径遍历漏洞 CVE-2022-37122。专为安全研究人员和授权的渗透测试人员设计。 🚨 重要声明 仅供教育/漏洞赏金使用 本工具仅用于： 教育目的 授权的安全测试 经明确许可的漏洞赏金狩猎 不得 将此工具用于非你所有或未获得明确书面授权的系统。 ✨ 特性 🎯 安全的默认载荷 : 使用 /etc/hostname（非敏感文件）进行负责任测试 🚀 高性能 : 支持多线程扫描，并发可配置 📊 全面报告 : 以 CSV 格式输出详细发现 💾 证据收集 ...

CVE-2022-37122

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly...

CVE-2022-37122

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly...

CVE-2022-37122

Carel pCOWeb HVAC BACnet Gateway 2.1.0 (Firmware A2.1.0–B2.1.0; Software v16 13020200; App 2.15.4A) is affected by an unauthenticated arbitrary file disclosure due to improper verification of the 'file' GET parameter in logdownload.cgi. The vulnerability allows directory traversal to disclose arb...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 Unauthenticated Directory Traversal Vulnerability

Carel pCOWeb HVAC BACnet Gateway version 2.1.0 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the file GET parameter through the logdownload.cgi bash script is not properly verified before being used to download log files. This can be exploited to...