锐捷 RG-BCR860 tracert 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cnvd.org.cn/flaw/show/CNVD-2023-54867
• https://nvd.nist.gov/vuln/detail/CVE-2023-3450
• https://bbs.huaweicloud.com/blogs/420085
• https://zhuanlan.zhihu.com/p/654716446
• https://cloud.tencent.com/developer/article/2315014
• https://developer.aliyun.com/article/1333664
• https://blog.csdn.net/weixin_43981050/article/details/132140222
• https://stack.chaitin.com/vuldb/detail/e669dc95-978b-4382-a12e-0c7762781786
• https://www.aqtd.com/nd.jsp?id=4621
• https://github.com/RCEraser/cve/blob/main/RG-BCR860.md
• https://github.com/advisories/GHSA-7rqq-78qv-fwr8

Related Vulnerabilities

• 锐捷 RG-BCR860 /cgi-bin/luci/;stok=b3bafdbb03f0dfcf96bef095f6060d64/admin/diagnosis 命令执行漏洞（CVE-2023-3450）
• 飞思网巡IT运维系统/tools/tracert.php任意命令执行漏洞