Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 – Unauthenticated Admin Password Reset - 体验盒子

作者： Adithyan AK

日期： 2019-01-16

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/46180/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

<!--

# Exploit Title: Coship Wireless Router – Unauthenticated Admin Password Reset

# Date: 15.01.2019

# Exploit Author: Adithyan AK

# Vendor Homepage: http://en.coship.com/

# Category: Hardware (Wifi Router)

# Affected Versions : Coship RT3052 - 4.0.0.48, Coship RT3050 - 4.0.0.40, Coship WM3300 - 5.0.0.54, Coship WM3300 - 5.0.0.55, Coship RT7620 - 10.0.0.49.

# Tested on: MacOS Mojave v.10.14

# CVE: CVE-2019-6441

# Change the X.X.X.X in poc to Router Gateway address and save the below code as Exploit.html

# Open Exploit.html with your Browser

# Click on “Submit request”

# Password of the admin will now be changed as "password123"

# PoC :

-->

<html>

<body>

</form>

</body>

</html>