| शीर्षक | Hangzhou Synway Digital Information Technology Co.,Ltd. SMG Gateway Management Software 9-12ping.php Command Injection |
|---|
| विवरण | The `9-12ping.php` file in Hangzhou Sanhui SMG Gateway Management Software is vulnerable to command execution. Attackers can exploit this vulnerability by crafting specific HTTP POST requests to execute arbitrary commands on the target system. This vulnerability can be exploited **without authentication** and affects multiple assets, as confirmed by FOFA search results (853 entries with the title "Gateway Management Software").
Arbitrary Command Execution: Attackers can execute system commands to gain full control over the target device.
Sensitive Information Disclosure: Commands may be used to retrieve sensitive data (e.g., configurations, credentials).
Service Disruption: Malicious commands could crash the device or disrupt critical operations. |
|---|
| स्रोत | ⚠️ https://github.com/stevenchen0x01/CVE/issues/1 |
|---|
| उपयोगकर्ता | Steven_Dra3w (UID 76559) |
|---|
| सबमिशन | 04/02/2025 01:30 PM (2 साल पहले) |
|---|
| संयम | 18/02/2025 04:58 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 296135 [Synway SMG Gateway Management Software तक 20250204 9-12ping.php retry अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|