References https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/IP%20guard%20WebServer/IP-guard%20WebServer%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/qq_61872115/article/details/134325465 https://www.aqtd.com/nd.jsp?id=5315 https://zhuanlan.zhihu.com/p/666002564 https://cn-sec.com/archives/2199126.html https://blog.csdn.net/qq_18193739/article/details/134320162 http://www.gzmcrown.com/a/services/22/3420.html https://github.com/blackvitasoy/nuclei_templates/blob/main/ip-guard-webserver-rce.yaml https://cn-sec.com/archives/2222793.html https://dev.to/sharon_42e16b8da44dabde6d/critical-rce-vulnerability-found-in-ip-guard-webserver-patch-now-23lm
Related VulnerabilitiesPoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2020-10532: WatchGuard Fireware AD Helper Component - Credentials DisclosureToshiba TopAccess /contentwebserver 默认口令漏洞IP-guard /ipg/console/Log/download_attachment 文件读取漏洞PoCdagster-webserver-ui-exposure: Dagster - Webserver UI ExposureWatchGuard Fireware OS 越界写入漏洞 可导致远程代码执行(CVE-2025-9242) WatchGuard Fireware OS 未授权远程代码执行漏洞PoCCVE-2021-24155: WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File UploadPoCCVE-2023-0527: Online Security Guards Hiring System - Cross-Site ScriptingPoCCVE-2024-37881: SiteGuard WP Plugin <= 1.7.6 - Login Page DisclosurePoCCVE-2024-45488: SafeGuard for Privileged Passwords < 7.5.2 - Authentication BypassPoCguardduty-findings: Open GuardDuty Findings