Dasan Networks H64 路由器 /running.CFG 路径存在敏感信息泄露

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.zeroscience.mk/advisories/ZSL-2017-5424.html
• https://www.exploit-db.com/exploits/42323
• https://forum.it.mk/threads/dasan-networks-gpon-ont-wifi-router-h64x-series-system-config-download.65314/
• https://cxsecurity.com/issue/WLB-2017070102
• https://www.exploit-db.com/exploits/42322
• https://www.zeroscience.mk/advisories/ZSL-2017-5421.html

Related Vulnerabilities

• Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞（CVE-2026-0257）
• Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞（CVE-2025-0107）
• Cambium Networks Canopy /login.cgi 默认口令漏洞
• （CVE-2025-4617）Palo Alto Networks Prisma Browser截图控制绕过漏洞
• （CVE-2025-4618）Palo Alto Networks Prisma Browser敏感信息泄露漏洞
• CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
• PoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting
• PoCCVE-2018-10562: Dasan GPON Devices - Remote Code Execution
• PoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting
• PoCCVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability
• PoCCVE-2024-9463: PaloAlto Networks Expedition - Remote Code Execution
• PoCCVE-2025-0107: Palo Alto Networks Expedition - OS Command Injection