Description
中科网威防火墙(NPFW) /direct/polling/CommandsPolling.php 文件filename参数存在命令执行漏洞
中科网威(netpower) 下一代防火墙控制系统 CommandsPolling.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E4%B8%AD%E7%A7%91%E7%BD%91%E5%A8%81-NPFW%E9%98%B2%E7%81%AB%E5%A2%99-CommandsPolling.php-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://peiqi.wgpsec.org/wiki/webapp/%E4%B8%AD%E7%A7%91%E7%BD%91%E5%A8%81/%E4%B8%AD%E7%A7%91%E7%BD%91%E5%A8%81%20NPFW%E9%98%B2%E7%81%AB%E5%A2%99%20CommandsPolling.php%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.html
https://www.ddpoc.com/DVB-2021-430.html
https://comwrg.github.io/1000php/bugs/wooyun-2015-0140998
https://trustcomputing.com.cn/bbs/archiver/?tid-997.html