References https://cn-sec.com/archives/2417888.html https://www.ctfiot.com/158593.html http://cn-sec.com/archives/2417888.html https://cn-sec.com/archives/2415598.html http://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247484694&idx=1&sn=a94612c927753f5257ccbb70a9c067f6&chksm=c0825960e5b53770123f0847629ffbe9b96b225c9f0388e2ade4a60becf0e85ec836eb13d35f&scene=27&key=d97ff789397cf58d9f6c2cf5008cb792a594cc9044d8d4ccfe567773de69b6ca7050f39b5dd13e4a8d8ea8028f4328b05c1a8c5ff7328ff6c3381d35b8dc65164306cfeb3ebd452ebd340ac3e80db9aa8c53887e36dfb564e6f583fa5e10c05b48f25ed68aa0b15543c361a8c10b2007debc83afead7ba0f147bab09c891dd65&acctmode=0&pass_ticket=lu%2FdA7mpCYdLRmXcDCsXGkAOSe%2BwbIAcyIsf8mNOPcPVWQc7VsEvoKZUu6dau%2FZvdlAp0br730hrWbPqmrQxVg%3D%3D&uin=NTY2NTA4NjQ%3D&devicetype=Windows+10+x64&version=63060012&lang=zh_CN&session_us=gh_cf325e4d8d77&countrycode=AL&exportkey=n_ChQIAhIQdyVsZxZEKE6tVtegjg4PWxLuAQIE97dBBAEAAAAAAGCEFKqgCBkAAAAOpnltbLcz9gKNyK89dVj0treHa9a7b8X1uQnfkWby8hRm0s%2BOcK8ldPopY%2FTQWk4htMLPWOKSF8MFxN%2Bz6yyKcC1metGWh798Ih3PkkC7GoPO8%2B9xw53KstaBiylTpNfso4NSHTQSN5oAN61iIryvHGDs33YkdAtVU6kntGIp%2BqQ%2F3GOvDWYo0m9VVGR6683KL14Hh13xNPHdCbOMl2rHtb3u4CgWTxlzqW1dPY2zN9tDsxcsNFgCJBQAeklQalE%2FjwgELjC4HT%2BZV9OgBq7FWb3W88JG3aU%3D&fontgear=2 https://cn-sec.com/archives/2418461.html https://cn-sec.com/archives/2399354.html https://deded.de/archives/8cd6a7ab-8aa5-47f5-9a98-4841f3f3b498 https://sechub.in/view/2806064 https://blog.csdn.net/Liyu_6618/article/details/135983788 https://sechub.in/view/2807713 https://sechub.in/view/2807976 https://sechub.in/view/2806064 https://cn-sec.com/archives/2413418.html https://sechub.in/tag/cellinx/ https://sechub.in/tag/uac.cgi/ https://cn-sec.com/archives/tag/cellinx https://cn-sec.com/archives/tag/uac-cgi https://cn-sec.com/archives/tag/%E6%91%84%E5%83%8F%E6%9C%BA/page/3 https://sechub.in/view/2807713
Related Vulnerabilitiescellinxnvt-getfilecontent-cgi-fileread: Cellinx NVT - GetFileContent.cgi - FileReadPoCCVE-2018-10738: NagiosXI <= 5.4.12 menuaccess.php - SQL injectionPoCCNVD-2021-14536: Ruijie RG-UAC Information DisclosurePoCCNVD-2021-27648: Ruijie RG-UAC Information Leakage VulnerabilityPoCguacamole-default-login: Guacamole Default LoginPoChuace-handler-filedownload: 华测监测预警系统任意文件下载PoChuace-sysgoupedit-sqli: 华测监测预警系统2.2 sysGroupEdit.aspx SQL注入漏洞PoCuac-elevate-without-prompt: UAC Elevate Without Prompting EnabledPoCwindows-uac-disabled: User Account Control DisabledPoCruijie-rg-uac-account-password-leakage: 锐捷RG-UAC存在管理账号密码泄露PoCruijie-rg-uac-nmc-sync-rce: 锐捷RG-UAC nmc_sync.php存在RCE漏洞PoCCNVD-2021-14536: Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information DisclosurePoCCVE-2023-23063: Cellinx NVT Web Server - Local File Disclosure