Vigor2960 fw1.5.1.1RC3 (r8167) Vigor3900 fw1.5.1.1beta_r8167
There are some command injection vulnerabilities in the mainfunction.cgi file. The details are as follows:
1. in downlaod_ovpn function
param($port, $op='open', $protocol='tcp') | |
#Remove Firewall Exception Rules | |
Function removeFirewall(){ | |
Invoke-Expression "Remove-NetFireWallRule -DisplayName 'WSL 2 Firewall Unlock *' "; | |
Invoke-Expression "netsh interface portproxy reset"; | |
} | |