Skip to content

Instantly share code, notes, and snippets.

@ph4nt0mbyt3

ph4nt0mbyt3/gist:9456312e867c10de8f808250ec0b12d3 Secret

Created July 20, 2023 04:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ph4nt0mbyt3/9456312e867c10de8f808250ec0b12d3 to your computer and use it in GitHub Desktop.
Save ph4nt0mbyt3/9456312e867c10de8f808250ec0b12d3 to your computer and use it in GitHub Desktop.
Download ZIP
SNMP Web Pro 1.1 Arbitrary File Deletion
Raw
gistfile1.txt
1. ADVISORY INFORMATION
=======================
Product: SNMP Web Pro 1.1
Vendor URL: https://voltronicpower.com/
Type: CWE-22
Date found: 2023-05-12
Date published: 2023-07-20
CVSSv3 Score: 9.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:P/RL:U)
2. CREDITS
==========
This vulnerability was discovered and researched by Ph4nt0mByt3.
3. VERSIONS AFFECTED
====================
SNMP Web Pro 1.1
4. INTRODUCTION
===============
SNMP Web Pro 1.1 is a web interface to control UPS systems
5. VULNERABILITY DETAILS
========================
The web server allows crafted requests to delete system files
6. PROOF OF CONCEPT
========================
NOT PUBLIC
7. SOLUTION
=======================
Enable HTTP Basic
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment