Description
在锐捷 RG-BCR860 2.5.13 中发现了一个漏洞，并被归类为严重漏洞。此问题会影响组件网络诊断页的一些未知处理。该作导致作系统命令注入。攻击可以远程发起。
锐捷 RG-BCR860 /cgi-bin/luci/;stok=b3bafdbb03f0dfcf96bef095f6060d64/admin/diagnosis 命令执行漏洞（CVE-2023-3450）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://bbs.huaweicloud.com/blogs/420085
https://cloud.tencent.com/developer/article/2315014
https://zhuanlan.zhihu.com/p/654716446
https://developer.aliyun.com/article/1333664
https://blog.csdn.net/weixin_43981050/article/details/132140222
https://cn-sec.com/archives/1927018.html
https://nvd.nist.gov/vuln/detail/cve-2023-3450
https://github.com/trickest/cve/blob/main/2023/CVE-2023-3450.md
https://vuldb.com/vuln/232547
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1889.html/