Description
EnGenius usbinteract.cgi接口处存在远程命令执行漏洞，未经身份验证的远程攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个 web 服务器。
EnGenius /web/cgi-bin/usbinteract.cgi 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.gm7.org/archives/53349
https://www.hzon.com/articles/84323037171571713.html
https://www.exploit-db.com/exploits/42114
https://cn-sec.com/archives/3997314.html
https://nvd.nist.gov/vuln/detail/CVE-2025-34035
https://vulncheck.com/advisories/engenius-enshare-iot-gigabit-cloud-service
https://github.com/projectdiscovery/nuclei-templates/issues/12920
https://avd.aliyun.com/detail?id=AVD-2025-34035
https://unit42.paloaltonetworks.com/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/