锐捷NBR路由器远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E9%94%90%E6%8D%B7-NBR%E8%B7%AF%E7%94%B1%E5%99%A8-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-2021-09650.md
• https://www.saury.net/1543.html
• https://www.ctfiot.com/78751.html
• https://blog.csdn.net/weixin_42277564/article/details/131091907
• https://peiqi.wgpsec.org/wiki/iot/%E9%94%90%E6%8D%B7/%E9%94%90%E6%8D%B7%20NBR%20%E8%B7%AF%E7%94%B1%E5%99%A8%20guestIsUp.php%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CNVD-2021-09650.html
• https://www.ruijie.com.cn/gy/xw-aqtg/87010
• https://wlzx.cug.edu.cn/info/1087/2261.htm
• https://cloud.tencent.cn/developer/article/1928249
• https://github.com/H4K6/Goby-POC/blob/main/%E9%94%90%E6%8D%B7NBR%E8%B7%AF%E7%94%B1%E5%99%A8%20EWEB%E7%BD%91%E7%AE%A1%E7%B3%BB%E7%BB%9F%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.json
• https://cloud.tencent.com/developer/article/2149163
• https://stack.chaitin.com/poc/detail/1035

Related Vulnerabilities

• PoCCNVD-2021-09650: 锐捷NBR路由器EWEB网管系统存在命令执行漏洞
• 锐捷NBR路由器弱口令漏洞
• 锐捷NBR路由器 弱口令漏洞
• 锐捷NBR路由器远程命令执行漏洞 (show version)
• 锐捷NBR路由器远程命令执行漏洞 - (攻击成功)
• 锐捷NBR路由器远程命令执行漏洞 (show webmaster)
• 锐捷 NBR 路由器 rac.php 文件 path 参数文件读取漏洞
• 锐捷 NBR 路由器 ipam.php 文件 path 参数文件读取漏洞
• 锐捷NBR路由器 /local/auth/php/getCfile.php 任意文件包含漏洞
• 锐捷 NBR 路由器 fileupload.php 文件任意文件上传漏洞