{"text_format":"3","workbook":"xlsx","n_sheets":1,"sheets":["路由器漏洞列表-瑞星"],"read":"whole","date_system":"1900"}

{"sheet":"路由器漏洞列表-瑞星","index":0,"n_rows":58,"n_cols":8,"rows_kept":58,"merged":[[1,1,23,1],[1,4,5,4],[1,5,5,5],[1,6,5,6],[8,4,11,4],[8,5,11,5],[8,6,11,6],[9,2,11,2],[12,4,20,4],[12,5,20,5],[12,6,20,6],[13,2,14,2],[16,2,17,2],[22,4,23,4],[22,5,23,5],[22,6,23,6],[24,1,43,1],[24,3,25,3],[24,4,25,4],[24,5,25,5],[24,6,25,6],[26,4,29,4],[31,4,32,4],[35,4,38,4],[40,4,43,4],[44,1,45,1],[44,4,45,4],[44,5,45,5],[44,6,45,6],[46,1,47,1],[46,4,47,4],[46,5,47,5],[46,6,47,6],[48,1,53,1],[51,4,52,4],[51,5,52,5],[51,6,52,6],[55,1,57,1]]}
["序号","厂商","受影响型号","固件版本","攻击需要的条件","漏洞危害影响","漏洞类型","备注"]
[1,"D-Link","DIR-300 rev B","2.14b01","无","返回交互Linux Shell 可执行命令如:cat /proc/version","未经验证导致系统命令注入"]
[2,null,"DIR-600 rev B","2.16b01"]
[3,null,"DIR-645","1.04b01"]
[4,null,"DIR-845","1.01b02"]
[5,null,"DIR-865","1.05b03"]
[6,null,"DSL-320B","EU_DSL-320B v1.23 date: 28.12.2010","无","下载系统配置文件\n1.如:192.168.178.111/config.bin\n可直接获得系统帐户及密码","无需验证访问配置文件","http://www.s3cur1ty.de/m1adv2013-018"]
[7,null,"DIR-635","2.34EU","1.系统用户及密码","1.导致攻击者插入恶意代码\n2.通过CSRF可以进行如激活远程管理操作","1.存储XSS\n2.反射型XSS\n3.CSRF","http://www.s3cur1ty.de/m1adv2013-013"]
[8,null,"DIR-615 - Hardware revision D3 ",4.13,"1.系统用户及密码\n2.开启Telnetd 23端口","1.远程命令执行如:uname -a等\n2.通过CSRF可以进行如激活远程管理操作\n3./etc/httpasswd文件密码泄漏\n4.HTTP Header注入通过修改header数据包进行跳转访问其他页面","1.系统命令注入\n2.为改变当前的密码没有请求的当前密码\n3.CSRF\n4.不安全加密存储\n5.反射型XSS\n6.HTTP Header注入\n7.信息泄漏"]
[9,null,"DIR-300 - Hardware revision A","1.05 , Fri 13 Feb 2009"]
[10,null,null,"1.05 , Mon 06 Jul 2009"]
[11,null,null,"1.05 , Fri 26 Nov 2010"]
[12,null,"DIR-600","below v2.16b01","无","可返回一个Linux 交互Shell(测试环境DIR-645)","1.系统命令注入\n2.信息泄漏"]
[13,null,"DIR-300 revB","v2.14b01",{"$nulls":3},"未经身份验证的命令注入"]
[14,null,null,"v2.13b01",{"$nulls":3},"验证命令注入"]
[15,null,"DIR-815","v1.03b02",{"$nulls":3},"未经身份验证的命令注入"]
[16,null,"DIR-645","v1.02",{"$nulls":3},"未经身份验证的命令注入"]
[17,null,null," v1.03"]
[18,null,"DIR-412","1.14WWB02",{"$nulls":3},"未经身份验证的命令注入"]
[19,null,"DIR-456","1.00ONG",{"$nulls":3},"未经身份验证的命令注入"]
[20,null,"DIR-110",1.01,{"$nulls":3},"未经身份验证的命令注入"]
[21,null,"DIR-615 - Hardware revision H1","8.04, Tue, 4, Sep, 2012\n8.04, Fri, 18, Jan, 2013","1.系统帐户及密码","1.系统命令执行如ping命令\n2.使用CSRF进行密码修改\n3.gconfig.htm文件导致信息泄漏","1.系统命令注入\n2.信息泄漏\n3.改变密码没有请求当前密码\n4.CSRF"]
[22,null,"DIR-600","版本:2.12b02 - 17/01/2012\n版本:2.13b01 - 07/11/2012\n版本:2.14b01 - 22/01/2013","1.系统帐户及密码","1.系统命令执行存在开启telnetd导致可以执行Linux shell命令\n2.利用存储型xss可导致恶意javascript脚本执行\n3.密码明文存储","1.系统命令注入\n2.信息泄漏\n3.为改变当前的密码没有请求的当前密码\n4.不安全加密存储\n5.存储型XSS"]
[23,null,"DIR 300 - HW rev B1","版本:2.12 - 18.01.2012\n版本:2.13 - 07.11.2012"]
[24,"TP-Link","TL-WA701N","固件: 3.12.6 Build 110210 Rel.37112n\n固件: 3.12.16 Build 120228 Rel.37317n - Published Date 2/28/2012\n硬件: WA701N v1 00000000","1.系统帐户及密码","1.可查看/etc/passwd及/etc/shadow\n2.利用存储型xss可导致恶意javascript脚本执行","1.目录遍历\n2.存储型XSS\n3.GET密码传输"]
[25,null,"TL-WA701ND"]
[26,null," TD-W8951ND ",null,"1.系统帐户及密码","1.利用xss可导致恶意javascript脚本执行\n2.可使用CSRF进行密码重置等操作","xss跨站脚本攻击"]
[27,null,"TL-SC3171 ",null,null,"攻击者可使用普通用户访问超级权限进行攻击","访问权限控制"]
[28,null,"TL-WDR4300 ",null,null,"利用xss可导致恶意javascript脚本执行","csrf攻击"]
[29,null," TL-WDR4300",null,null,"攻击者可执行系统命令等操作","1.远程命令执行\n2.目录遍历"]
[30,null," TL-WR741N / TL-WR741ND",null,null,"导致路由系统重启或功能丧失","远程DOS"]
[31,null,"TL-WR1043ND",null,"1.系统帐户及密码","1.利用xss可导致恶意javascript脚本执行\n2.导致路由系统重启或功能丧失","1.csrf攻击\n2.DOS拒绝服务攻击"]
[32,null,"TD-8817 ",null,null,"利用xss可导致恶意javascript脚本执行","csrf攻击"]
[33,null,"WR740N ",null,null,"导致路由系统重启或功能丧失","远程DOS拒绝服务攻击"]
[34,null,"TL-WR1043ND ",null,null,"攻击者可查看配置文件敏感信息","遍历任意文件操作"]
[35,null,"TL-WA701 ",null,"1.系统帐户及密码","1.攻击者可以重置密码等用户密码操作\n2.利用xss可导致恶意javascript脚本执行","1.任意用户密码操作\n2.xss跨站脚本攻击"]
[36,null," WR2543ND ",null,null,"利用xss可导致恶意javascript脚本执行","Csrf攻击"]
[37,null,"TL-WR841N",null,null,"1.利用xss可导致恶意javascript脚本执行\n2.攻击者可查看任意目录文件","1.Xss跨站脚本攻击\n2.目录遍历"]
[38,null,"TD-W8151N",null,null,"利用xss可导致恶意javascript脚本执行","csrf攻击"]
[39,null," TL-WR841N / TL-WR841ND ",null,null,"导致路由系统重启或功能丧失","远程DOS"]
[40,null,"TL-WA701 ",null,"1.系统帐户及密码","利用可导致恶意javascript脚本执行","Xss跨站脚本攻击"]
[41,null,"8840T ",null,null,"攻击者利用此缺陷可直接访问管理操作","访问控制缺陷"]
[42,null,"TL-WR740N ",null,null,"利用xss可导致恶意javascript脚本执行","Xss跨站脚本攻击"]
[43,null," TD-8810 ",null,null,"利用xss可导致恶意javascript脚本执行","Csrf攻击"]
[44,"Edimax"," EW-7206APg ","固件: Rev. A\n运行代码版本: v1.32,V1.33","1.系统帐户及密码","1.利用存储型xss可导致恶意javascript脚本执行\n2.HTTP Header注入通过修改header数据包进行跳转访问其他页面","1.URL重定向\n2.反射型XSS\n3.存储型xss\n4.HTTP Header注入"]
[45,null,"EW-7209APg","固件: Rev. A\n运行代码版本:: 1.21,1.29"]
[46,"Raidsonic","IB-NAS5220"," 2.6.3-20100206S","1.系统帐户及密码","1.非法访问页面如:nav.cgi?foldName=adm&localePreference=en\n2.利用存储型xss可导致恶意javascript脚本执行\n3.系统命令执行如ping命令等","1.验证绕过\n2.存储型XSS\n3.未经验证的操作系统命令注入"]
[47,null,"IB-NAS4220-B","2.6.3.IB.1.RS.1"]
[48,"Linksys/Cisco","WRT160Nv2","v2.0.03 build 009","1.系统帐户及密码","1.系统命令执行如ping命令\n2.可查看/proc/version\n3.通过CSRF可以进行如激活远程管理操作","1.系统命令注入\n2.目录遍历\n3.XSS\n4.为改变当前的密码没有请求的当前密码\n5.CSRF"]
[49,null,"WRT54GL v1.1","固件:4.30.15 build 2, 01/20/2011","1.系统帐户及密码","1.系统命令执行如ping命令\n2.可执行恶意javascript脚本","1.系统命令注入\n2.为改变当前的密码没有请求的当前密码\n3.CSRF\n4.反射型XSS\n5.存储型XSS"]
[50,null,"WAG200G","v1.01.06","1.系统帐户及密码","1.系统命令执行如ping命令\n2.利用存储型xss可导致恶意javascript脚本执行","1.系统命令注入\n2.改变密码没有请求当前密码\n3.存储型XSS"]
[51,null,"E1500","v1.0.00 - build 9 Feb. 17, 2011\nv1.0.04 - build 2 Mär. 8, 2012\nv1.0.05 - build 1 Aug. 23, 2012","1.系统帐户及密码","1.E1500 和 E2500 v1.0.03存在系统执行,导致可获得Linux交互shell\n2.可查看/proc/version等系统信息\n3.XSS导致执行恶意javascript脚本","1.系统命令注入(E1500 和 E2500 v1.0.03)\n2.目录遍历(E1500)\n3.为改变当前的密码没有请求的当前密码(E1500)\n4.CSRF(E1500)\n5.反射型XSS(E1500)\n6.重定向(E1500)"]
[52,null,"E2500"," v1.0.03"]
[53,null,"X3000","1.0.03 build 001 Jun 11,2012","1.登录用户及密码\n2.修改POST提交/apply.cgi的ping_ip的值如:ping_ip=ping -c 192.x.x.x","系统命令执行如:ping命令等","1.系统命令注入\n2.为改变当前的密码没有请求的当前密码\n3.反射型XSS"]
[54,"OpenPLI","Dream Multimedia","1.1.0, 27.01.2013","1.登录用户及密码","1.可执行系统命令\n2.利用存储型xss可导致恶意javascript脚本执行","1.系统命令注入\n2.存储型XSS"]
[55,"Netgear","DGN2200B","固件: V1.0.0.36_7.0.36 - 04/01/2011\nGUI Sprachversion: V1.0.0.25","1.系统用户及密码\n2.在PPOE配置存在命令执行","1.可执行系统命令\n2.系统帐户密码泄漏\n3.利用存储型xss可导致恶意javascript脚本执行","1.PPOE配置存在OS命令注入\n2.不安全加密存储\n3.存储型XSS"]
[56,null,"DGN1000B","V1.1.00.24\nV1.1.00.45","1.系统用户及密码","1.UPNP处可执行系统命令导致可获得Linux 交互shell\n2.系统密码明文存储","1.系统命令注入\n2.不安全的加密存储\n3.XSS"]
[57,null,"SPH200D","固件:1.0.4.80\n内核:4.1-18\nweb版本:1.5","1.系统用户及密码","1.通过目录遍历可查看系统文件等敏感信息\n2.可执行恶意javascript脚本","1.目录遍历\n2.为改变当前的密码没有请求的当前密码\n3.信息泄漏\n4.反射型XSS\n"]