| 标题 | JingDong Cloud NAS Router AX6600 (4.5.1.r4533 and earlier) Remote Command Execution |
|---|
| 描述 | There is RCE in the storage. extra. get_status interface of JD Wireless Treasure router
The device received parameters from the user without strict processing and filtering, and directly concatenated them for command execution, resulting in RCE
You can access the vulnerability details and vulnerability replication videos through the following link https://my.feishu.cn/wiki/QnFXwdHUni48RXkw7xjcQCxHnId |
|---|
| 来源 | ⚠️ https://my.feishu.cn/wiki/QnFXwdHUni48RXkw7xjcQCxHnId |
|---|
| 用户 | ShiyuFan_BinYuan (UID 95126) |
|---|
| 提交 | 2026-02-03 10時18分 (8 月前) |
|---|
| 管理 | 2026-02-15 20時17分 (12 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 346170 [JingDong JD Cloud Box AX6600 直到 4.5.1.r4533 jdcapp_rpc /f/service/controlDevice set_stcreenen_deabled_status/get_status 权限提升] |
|---|
| 积分 | 0 |
|---|