Description
Tosei 自助洗衣机 /cgi-bin/view_data.php 接口存在文件读取漏洞。攻击者可通过传入特定参数读取服务器上的任意文件，进而获取敏感信息，危及设备及系统安全。
Tosei Self-service Washing Machine /cgi-bin/downloader.php 目录遍历漏洞（CVE-2024-43022）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-43022
https://www.tenable.com/cve/CVE-2024-43022
https://dbugs.ptsecurity.com/vulnerability/PT-2024-30257
https://github.com/advisories/GHSA-grxj-hmrx-25w5
https://avd.aquasec.com/nvd/2024/cve-2024-43022/
https://gist.github.com/b0rgch3n/6ba0b04da7e48ead20f10b15088fd244