| शीर्षक | SECCN router G10 VPN Command Injection |
|---|
| विवरण | SECCN G10 VPN exposes an undocumented HTTP service on TCP port 81 in addition to the official management interface on port 10000.
The CGI endpoint /cgi-bin/weixin_login.cgi improperly processes the "user" parameter without sufficient input validation.
An attacker can inject shell metacharacters (e.g., ';') to append arbitrary commands.
The vulnerability can be exploited remotely without authentication by sending a crafted HTTP request to port 81.
Successful exploitation results in arbitrary command execution on the affected device.
|
|---|
| स्रोत | ⚠️ https://github.com/Blackhole23-Lab/-/blob/main/vulns/SECCN%20G10.md |
|---|
| उपयोगकर्ता | xxyNB (UID 94808) |
|---|
| सबमिशन | 13/02/2026 02:04 PM (8 महीनों पहले) |
|---|
| संयम | 23/02/2026 07:54 PM (10 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 346488 [SECCN Dingcheng G10 3.1.0.181203 session_login.cgi qq user अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|