当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0106599

漏洞标题:某省IOT物联网系统站Getshell

相关厂商:cncert国家互联网应急中心

漏洞作者: 路人甲

提交时间:2015-04-10 15:07

修复时间:2015-05-29 18:22

公开时间:2015-05-29 18:22

漏洞类型:命令执行

危害等级:高

自评Rank:12

漏洞状态:已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-04-10: 细节已通知厂商并且等待厂商处理中
2015-04-14: 厂商已经确认,细节仅向厂商公开
2015-04-24: 细节向核心白帽子及相关领域专家公开
2015-05-04: 细节向普通白帽子公开
2015-05-14: 细节向实习白帽子公开
2015-05-29: 细节向公众公开

简要描述:

某省IOT物联网系统站Getshell

详细说明:

网站:宁夏农业物联网
站点存在Struts2命令执行,导致直接Getshell

1.png


测试地址:http://iot.cwebport.com/1.jsp

漏洞证明:

0x02:info
win-2p7hiqvp9ab\administrator
D:\WebSites\iot.cwebport.com\ROOT\

活动连接
协议 本地地址 外部地址 状态
TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:82 0.0.0.0:0 LISTENING
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:593 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2179 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3388 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8009 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8088 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8215 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8800 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8890 0.0.0.0:0 LISTENING
TCP 0.0.0.0:16003 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49208 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49543 0.0.0.0:0 LISTENING
TCP 0.0.0.0:52098 0.0.0.0:0 LISTENING
TCP 0.0.0.0:52099 0.0.0.0:0 LISTENING
TCP 0.0.0.0:52101 0.0.0.0:0 LISTENING
TCP 0.0.0.0:58081 0.0.0.0:0 LISTENING
TCP 0.0.0.0:64899 0.0.0.0:0 LISTENING
TCP 124.224.21.30:80 1.50.231.22:4448 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4449 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4450 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4451 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4459 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4462 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4463 TIME_WAIT
TCP 124.224.21.30:80 1.50.231.22:4464 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37701 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37702 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37704 ESTABLISHED
TCP 124.224.21.30:80 111.20.19.36:37714 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37715 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37716 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37717 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37718 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37719 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37736 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37737 ESTABLISHED
TCP 124.224.21.30:80 111.20.19.36:37893 TIME_WAIT
TCP 124.224.21.30:80 111.20.19.36:37900 TIME_WAIT
TCP 124.224.21.30:139 0.0.0.0:0 LISTENING
TCP 124.224.21.30:8080 124.224.21.30:61217 TIME_WAIT
TCP 124.224.21.30:8080 124.224.21.30:61758 TIME_WAIT
TCP 124.224.21.30:49162 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49234 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49318 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49412 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49481 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49483 124.224.21.43:1521 ESTABLISHED
TCP 124.224.21.30:49540 124.224.21.43:1521 ESTABLISHED

修复方案:

补丁+配置

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:8

确认时间:2015-04-14 18:20

厂商回复:

CNVD确认并复现所述情况,已经转由CNCERT下发给宁夏分中心,由其后续协调网站管理单位处置。

最新状态:

暂无