| 标题 | Tecno Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 Command Injection |
|---|
| 描述 | A vulnerability was found in Tecno 4G Portable WiFi TR118 firmware version(TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830) that allows an authenticated remote attacker on LAN to execute arbitrary code via a crafted request using the ping feature of the network diagnostic tools. The vulnerability is a blind command injection that allows an attacker to execute arbitrary commands on the device due to client side validation being performed on the request and no server side validation being done. With tools such as BurpSuite, an attacker can intercept and alter the request to include system commands enclosed in backticks which are executed by the device.
** The vendor requested to only provide a rough description of the vulnerability details without mentioning specific product information. Kindly do not disclose the POC to the public**
|
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1DUSlAxTbNLBdv1aLUAn-tDMu6Z1rHYH8/view?usp=drive_link |
|---|
| 用户 | Allan Njuguna (UID 57480) |
|---|
| 提交 | 2023-11-16 16時58分 (3 年前) |
|---|
| 管理 | 2023-11-26 08時54分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 246130 [Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830 Ping Tool goform_get_cmd_process url 权限提升] |
|---|
| 积分 | 20 |
|---|