References https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E9%94%90%E6%8D%B7-NBR%E8%B7%AF%E7%94%B1%E5%99%A8-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-2021-09650.md https://peiqi.wgpsec.org/wiki/iot/%E9%94%90%E6%8D%B7/%E9%94%90%E6%8D%B7%20NBR%201300G%E8%B7%AF%E7%94%B1%E5%99%A8%20%E8%B6%8A%E6%9D%83CLI%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html https://www.ctfiot.com/78751.html https://www.ruijie.com.cn/gy/xw-aqtg/87010 https://cloud.tencent.cn/developer/article/1928249 https://www.saury.net/1543.html https://www.cnvd.org.cn/flaw/show/CNVD-2021-17370 https://avd.aliyun.com/detail?id=AVD-2021-888787 https://wlzx.cug.edu.cn/info/1087/2261.htm https://blog.csdn.net/weixin_42277564/article/details/131091907 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E9%94%90%E6%8D%B7-NBR-1300G%E8%B7%AF%E7%94%B1%E5%99%A8-%E8%B6%8A%E6%9D%83CLI%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://www.hackjie.com/docs/3263.html https://blog.csdn.net/weixin_30316097/article/details/96813149 https://bdziyi.com/9042/ https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/%E9%94%90%E6%8D%B7/%E9%94%90%E6%8D%B7NBR%201300G%E8%B7%AF%E7%94%B1%E5%99%A8%20%E8%B6%8A%E6%9D%83CLI%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md?hash=zE0KEPGJ https://www.hackjie.com/docs/3268.html https://cn-sec.com/archives/tag/e/page/3
Related VulnerabilitiesPoCCNVD-2021-09650: 锐捷NBR路由器EWEB网管系统存在命令执行漏洞锐捷NBR路由器弱口令漏洞锐捷NBR路由器远程命令执行漏洞锐捷NBR路由器 弱口令漏洞锐捷NBR路由器远程命令执行漏洞 (show version)锐捷NBR路由器远程命令执行漏洞 - (攻击成功)锐捷 NBR 路由器 rac.php 文件 path 参数文件读取漏洞锐捷 NBR 路由器 ipam.php 文件 path 参数文件读取漏洞锐捷NBR路由器 /local/auth/php/getCfile.php 任意文件包含漏洞锐捷 NBR 路由器 fileupload.php 文件任意文件上传漏洞