mirror of https://github.com/qwqdanchun/Goby.git
43 lines
1.3 KiB
JSON
43 lines
1.3 KiB
JSON
|
{
|
|||
|
|
"Name": "Topsec Firewall telnet default account",
|
|||
|
|
"Description": "天融信防火墙telnet默认口令，攻击者可利用默认口令登录telnet，并执行设备配置命令，甚至控制整个设备。",
|
|||
|
|
"Product": "Topsec-Firewall",
|
|||
|
|
"Homepage": "https://www.topsec.com.cn/",
|
|||
|
|
"DisclosureDate": "2020-08-11",
|
|||
|
|
"Author": "itardc@163.com",
|
|||
|
|
"FofaQuery": "app=\"TOPSEC-Firewall\"",
|
|||
|
|
"GobyQuery": "",
|
|||
|
|
"Level": "3",
|
|||
|
|
"Impact": "天融信防火墙telnet默认口令，攻击者可利用superman:talent口令登录telnet，并执行设备配置命令，甚至控制整个设备。",
|
|||
|
|
"Recommendation": "修改默认口令，密码最好包含大小写字母、数字和特殊字符等且位数大于8位；如非必要，禁止公网访问该设备；白名单限制可访问IP。",
|
|||
|
|
"References": [
|
|||
|
|
"https://fofa.so"
|
|||
|
|
],
|
|||
|
|
"HasExp": true,
|
|||
|
|
"ExpParams": [
|
|||
|
|
{
|
|||
|
|
"name": "cmd",
|
|||
|
|
"type": "input",
|
|||
|
|
"value": "show-running"
|
|||
|
|
}
|
|||
|
|
],
|
|||
|
|
"ExpTips": {
|
|||
|
|
"Type": "",
|
|||
|
|
"Content": ""
|
|||
|
|
},
|
|||
|
|
"ScanSteps": null,
|
|||
|
|
"ExploitSteps": null,
|
|||
|
|
"Tags": [
|
|||
|
|
"defaultaccount"
|
|||
|
|
],
|
|||
|
|
"CVEIDs": null,
|
|||
|
|
"CVSSScore": null,
|
|||
|
|
"AttackSurfaces": {
|
|||
|
|
"Application": null,
|
|||
|
|
"Support": null,
|
|||
|
|
"Service": null,
|
|||
|
|
"System": null,
|
|||
|
|
"Hardware": ["TOPSEC-Firewall"]
|
|||
|
|
},
|
|||
|
|
"Disable": false
|
|||
|
|
}
|