CVE-2019-16889 PoC — Ubiquiti Networks EdgeMAX 资源管理错误漏洞

Source

Associated Vulnerability

Title:Ubiquiti Networks EdgeMAX 资源管理错误漏洞 (CVE-2019-16889)
Description:Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

Description

Proof of conecept for CVE-2019-16889 (Resource consumption on Ubiquiti Edgemax 1.10.6 and earlier

Readme


Resource Consumption DOS on Edgemax v1.10.6

Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889.

This is my first time using asyncio, if you see a more efficient way to do this please let me know!

See the following:
https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/


A requirements.txt file has been added to this repository so 'pip3 install -r requirements.txt' should work.

File Snapshot


 [4.0K]  /data/pocs/2f456004a3b8e81b94cf19aace7131f1151de0e7
├── [1.7K]  meep.py
├── [ 502]  README.md
└── [  17]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!