CVE-2020-23583 PoC — Optilink Network OP-XT71000N 命令注入漏洞

Source

https://github.com/huzaifahussain98/CVE-2020-23583

Associated Vulnerability

Title:Optilink Network OP-XT71000N 命令注入漏洞 (CVE-2020-23583)
Description:OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

Description

REMOTE CODE EXECUTION found in "OPTILINK OP-XT71000N".

Readme

# CVE-2020-23583

**OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OP_V3.3.1-191028"**  

REMOTE CODE EXECUTION found in "OPTILINK OP-XT71000N". The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

**TARGET**

/diag_ping_admin.asp

**Attack Vector**

pass arbitrary commands with IP-ADDRESS using " | " to execute commands.

**REGARDS**

Huzaifa Hussain

https://twitter.com/disguised_noob

https://www.linkedin.com/in/huzaifa-hussain-046791179

File Snapshot


 [4.0K]  /data/pocs/5bff2bd0f0697e723e7f183b12ddc09dedd1c666
└── [ 660]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!