Created
June 27, 2020 15:24
-
-
Save Saket-taneja/9576573122be1cb0d6dc9d9a73db5631 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows | |
remote attackers to obtain sensitive information via the | |
form/formDeviceVerGet URI, such as system id, hardware model, hardware | |
version, bootloader version, software version, software image file, | |
compilation time, and system uptime. | |
The attacker just has to create a request to | |
http://routerip/form/formDeviceVerGet | |
and in the response the whole information about the router will be disclosed to the attacker. | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment