[Loki]

In this firmware version, the web server is not properly handling the

ntp_zone_val

field in the CGI request for

/goform/set_ntp

. This allows an attacker to craft a malicious

ntp_zone_val

field and send a malicious HTTP request to the

/goform/set_ntp

CGI, leading to command execution with administrator privileges on the firmware file system.

Hidden Content

You must register or login to view this content.

[9CLEAN]

Keyword the query search in shodan ?

[ghostess256]

but why ntp_zone_val

[Loki]

but why ntp_zone_val

This might help.

https://github.com/Swind1er/Video/raw/main/set_ntp.mp4

[juras]

thanks buddy , , , , , , , ,

[Dyn]

In this firmware version, the web server is not properly handling the

ntp_zone_val

field in the CGI request for

/goform/set_ntp

. This allows an attacker to craft a malicious

ntp_zone_val

field and send a malicious HTTP request to the

/goform/set_ntp

CGI, leading to command execution with administrator privileges on the firmware file system.

Good luck my fried

[vshdevi]

thanks you so much

[rootsenpai]

thanks you so much

[1malware]

Checking it out.I hope he lives to work.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[0asdasdasd]

Thank you father. I love you breachforums cmmunity.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.