Description
Hytec Inter HWL-2511-SS中存在命令注入漏洞，该漏洞是由于popen.cgi接口对用户的请求验证不当导致的。
Hytec Inter HWL-2511-SS popen.cgi 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adminlove520/pocWiki/blob/main/Hytec%20Inter%20HWL-2511-SS%20popen.cgi%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/1zzZ/p/17637589.html
https://stack.chaitin.com/vuldb/detail/a5ef42a0-8065-4bed-b4e3-7ded8f783108
https://neroteam.com/blog/hytec-inter-hwl-2511-ss-vulnerability-report
https://www.ddpoc.com/DVB-2022-3865.html
https://pentest-tools.com/vulnerabilities-exploits/hytec-inter-hwl-2511-ss-remote-command-execution_2143
https://cn-sec.com/archives/2266220.html
https://avd.aliyun.com/detail?id=AVD-2022-36555
https://nvd.nist.gov/vuln/detail/CVE-2022-36553
https://access.redhat.com/security/cve/cve-2022-36553
https://gist.github.com/Nwqda/b27418ab801eb0b9cdbe8d042cb0249b
https://www.scaprepo.com/relation.jsp?relationId=CVE-2022-36553&search=CVE-2022-36553&filter=