Description
MagicFlow 防火墙网关 main.xp 存在任意文件读取漏洞，攻击者通过构造特定的Url获取敏感文件
MagicFlow 防火墙网关 main.xp 任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/MagicFlow-%E9%98%B2%E7%81%AB%E5%A2%99%E7%BD%91%E5%85%B3-main.xp-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://peiqi.wgpsec.org/wiki/iot/MagicFlow/MagicFlow%20%E9%98%B2%E7%81%AB%E5%A2%99%E7%BD%91%E5%85%B3%20main.xp%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.html
https://www.saury.net/1833.html
https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/_book/PeiQi_Wiki/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/MagicFlow/MagicFlow%20%E9%98%B2%E7%81%AB%E5%A2%99%E7%BD%91%E5%85%B3%20main.xp%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.html?hash=zE0KEPGJ
https://cve.imfht.com/poc_detail/4555a479d2681ab49536b2421009e19e5ae2fe99