mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 10:25:55 +00:00
26 lines
744 B
Markdown
26 lines
744 B
Markdown
|
# CrestronHD aj.html存在弱口令漏洞
|
||
|
|
|
||
|
|
### 一、漏洞描述
|
||
|
|
Crestron HD等系列设备 aj.html页面调用特定的参数可以获取账号密码等敏感信息
|
||
|
|
|
||
|
|
### 二、影响版本
|
||
|
|
<font style="color:#000000;">Crestron HD</font>
|
||
|
|
|
||
|
|
### 三、资产测绘
|
||
|
|
```plain
|
||
|
|
app="Crestron-HD-RX-201-C-E"
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### 四、漏洞复现
|
||
|
|
```plain
|
||
|
|
admin/admin
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
> 更新: 2024-08-12 17:48:53
|
||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/ek2kiaazq9fkwyo0>
|