Description
F-logic存在远程代码执行漏洞，该漏洞是由于config_time_sync接口对用户发送的请求验证不当导致的。
F-logic config_time_sync 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-7066
https://vuldb.com/vuln/272347
https://nvd.nist.gov/vuln/detail/CVE-2024-7066
https://vulners.com/cnnvd/CNNVD-202407-2434
https://cve.org/CVERecord?id=CVE-2024-7066
https://access.redhat.com/security/cve/cve-2024-7066
https://socradar.io/free-tools/cve-radar/CVE-2024-7066
https://wiki.shikangsi.com/post/share/17dfab05-2c50-4437-afa7-ef1f5a1f43f8
https://github.com/ibaiw/2024Hvv/blob/main/F-logic%20DataCube3%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/3006038.html
https://zhuanlan.zhihu.com/p/1932214870562047555
https://blogs.cappriciosec.com/cve/231/Critical%20Vulnerability%20in%20F-logic%20DataCube3%20-%20CVE-2024-7066