skr11lex/cve-2023-33477Exploit for CVE-2023-33477, an unauthorized configuration file download vulnerability in Harmonic NSG 9000-6G modulator, allowing remote attackers to retrieve sensitive config.exp file.
CVE-2023-33477
Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file
Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while remotely connected. The configuration file contains a large number of sensitive interfaces and the request method is written in the file, allowing attackers to further test the device
