cve/2022/CVE-2022-23178.md

CVE-2022-23178

Description

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname and upassword fields.

POC

Reference

• https://www.redteam-pentesting.de/advisories/rt-sa-2021-009

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/20142995/pocsuite3
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AnthonyTippy/Vulnerabilities
• https://github.com/ArrestX/--POC
• https://github.com/HimmelAward/Goby_POC
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/luck-ying/Library-POC
• https://github.com/xanszZZ/pocsuite3-poc