Description
Yachtcontrol是荷兰Yachtcontrol公司的一套船舶导航系统。 Yachtcontrol 2019-10-06及之前版本中存在安全漏洞。攻击者可利用该漏洞执行操作系统命令。
Yachtcontrol 2019-10-06 未授权远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2019-17270
https://www.exploit-db.com/exploits/47760
https://github.com/advisories/GHSA-g83g-x6pg-6c84
https://avd.aliyun.com/detail?id=AVD-2019-17270
http://packetstormsecurity.com/files/155582/Yachtcontrol-2019-10-06-Remote-Code-Execution.html
https://beaglesecurity.com/blog/vulnerability/yachtcontrol-web-application-1-0-unauthenticated-rce.html
https://www.cvedetails.com/version/1604299/Yachtcontrol-Yachtcontrol-2019-10-06.html