References https://github.com/H4K6/Goby-POC/blob/main/TamronOS_IPTV_ping_RCE.go https://www.vulncheck.com/advisories/tamronos-iptv-command-injection-via-api-ping-rce https://github.com/runZeroInc/nuclei-templates/blob/main/http/vulnerabilities/other/tamronos-rce.yaml https://github.com/emadshanab/goby-poc/blob/main/TamronOS-IPTV-ping-RCE.json https://cve.imfht.com/detail/CVE-2023-3606 https://x.com/0xd3vil/status/1405349919892807687 https://www.saury.net/2383.html http://www.tamronos.com/ https://github.com/chaitin/xray-plugins/blob/main/poc/manual/tamronos-iptv-rce.yml
Related VulnerabilitiesPoCtamron-os-iptv-ping-rce: TamronOS IPTV系统 ping 任意命令执行漏洞PoCtamronos-iptv-createuser: TamronOS Iptv 无权限创建用户PoCtamronos-rce: TamronOS IPTV/VOD - Remote Command ExecutionPoCtamronos-user-creation: TamronOS IPTV - Arbitrary User CreationTamronOS IPTV系统 detect 远程命令执行漏洞TamronOSIPTV系统 detect命令执行TamronOSIPTV系统 discovery 命令执行TamronOS IPTV backup 接口任意文件下载漏洞TamronOSIPTV系统存在任意文件下载漏洞TamronOS IPTV 系统 backup 任意文件下载漏洞TamronOSIPTV系统submit任意用户创建漏洞TamronOSIPTV系统ping任意命令执行漏洞