Ruijie-RG-EW1200G CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

RG-EW1200G后台远程代码执行漏洞(CVE-2023-3306)
CVE-2023-4169 未授权任意密码修改(CVE-2023-4169)
锐捷RG-EW1200G 登录绕过(CVE-2023-4415)

Atenção

我开发了一个用于本地测试和POC开发的工具，仅供技术学习参考。请不要将其用于非法目的。个人或组织使用本文提供的信息所造成的任何直接或间接后果和损失均由用户自行负责，与作者无关！！！ I have developed a tool for local testing and POC development, which is for technical learning reference only. Please do not use it for illegal purposes. Any direct or indirect consequences and losses caused by individuals or organizations using the information provided in this article are the responsibility of the user themselves and have nothing to do with the author!!!

Descrição

A Ruijie Network é uma marca de soluções de comunicação de dados. A Ruijie Network segue o caminho da pesquisa e desenvolvimento independentes, e assume um caminho de desenvolvimento único no mercado de equipamentos de rede ferozmente competitivo com "inovação de cenário". Desde sua fundação, a Ruijie Network estabeleceu sua missão de "promover o desenvolvimento da tecnologia de rede, acompanhar a onda das aplicações de rede, integrar tecnologia e aplicações, e impulsionar o progresso social".

Instalação

Basta instalar a biblioteca requests

pip install -r requirements.txt

Uso da Ferramenta

python 锐捷RG-EW1200G登录绕过(CVE-2023-4415).py -h
usage: 锐捷RG-EW1200G登录绕过(CVE-2023-4415).py [-h] (-u URL | -f FILE) [--random-agent RANDOM_AGENT | -a USERAGENT]
                                          [-d DELAY] [-t THREAD] [--proxy PROXY]

Ruijie RG-EW1200G: login bypass(CVE-2023-4415) & RCE(CVE-2023-3306) & anonymous reset password(CVE-2023-4169)

optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     Enter target object
  -f FILE, --file FILE  Input target object file
  --random-agent RANDOM_AGENT
                        Using random user agents
  -a USERAGENT, --useragent USERAGENT
                        Using the known User-agent
  -d DELAY, --delay DELAY
                        Set multi threaded access latency (setting range from 0 to 5)
  -t THREAD, --thread THREAD
                        Set the number of program threads (setting range from 1 to 50)
  --proxy PROXY         Set up the proxy

After obtaining login permissions, the following operations can be performed：
- Enter 0 to exit the connecion!
- Enter 1 to show all the cookies which has been recorded!
- Enter 2 to try to login bypass the machine!
- Enter 3 to try to remote code Execute to control the machine!
- Enter 4 to try to reset the user's password!

Exemplo

CVE-2023-4169_CVE-2023-3306_CVE-2023-4415