Cisco RV340 upload.cgi 授权绕过 (CVE-2022-20705)

2022-05-05 Cisco RV340 PoC No

Description

Cisco RV340 是一款vpn路由器。Nginx 配置不当加上 upload.cgi 对 cookie 两者处理不一致导致的授权绕过。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities