CVE-2021-43469 PoC — VENGA 路由器命令注入漏洞

Source

https://github.com/badboycxcc/CVE-2021-43469

Associated Vulnerability

Title:VENGA 路由器命令注入漏洞 (CVE-2021-43469)
Description:VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.

Description

CVE-2021-43469

Readme

# CVE-2021-43469
![image](https://user-images.githubusercontent.com/72059221/144845110-cc77bcfb-d503-4b36-8be5-d428a5ce004e.png)


### Exploit Title: VINGA router has weak passwords and background command execution vulnerabilities.
### product: VINGA WR-N300U 
### webserver: goahead
### Author: CXAQHQ
### TIME: 2021-11-01

### Command execution vulnerabilities exist on the Ping and traceroute interfaces after login.
### Run the IP addr command
![avatar](post.jpg)
![avatar](222.png)


### IDA looks at the vulnerability code
![avatar](333.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-43469 PoC — VENGA 路由器 命令注入漏洞