CVE-2018-12705 : Digisol Wireless Router DG-BR4000NG XSS Proof of Concept

This is my first CVE. I found that specified router is vulnerable to Cross-Site Scripting. This vulnerability is still a zero day, today being 24th of June 2018. To exploit the vulnerability, the following steps were taken.

Step 1: 

Connect to the Wifi network and open the Gateway. I did it by opening 192.168.2.1 .




Step 2:

Press General Setup and change the SSID to something else that can be accepted. I set it as "testing".



Step 3:

Open BurpSuite and the change the proxy settings of the internet browser so that Burp can intercept the data. After that hit apply on the Digisol page that is already open.

Step 4:

Now Burp will intercept the data, and now just change the SSID parameter form "testing" to "<script>alert("ADIPTA")</script> and then forward the intercept.

Now everything is done. Now after the page reloads after you join the newly named Wifi network, you will find that you will have a stored XSS as soon as you open General and then Basic Setup. The outcome will look like:




Comments

  1. Thanks for sharing this great information about detail, i shared this information to my all friends on social media platform because this info helps to everyone.

    How to Set Up a Linksys Range Extender
    Linksys Extender Re1000
    Linksys Smart Wifi Setup Not Working
    How to re-configure a Linksys Extender
    httpextender linksys com
    linksys initial setup

    ReplyDelete
  2. Tec-blogs.com consecutively publish self-help articles on all routers, extenders,
    modems and other networking devices. Our articles attune with quality and layman
    language to support non-technical people to resolve the technical issues on their own.
    We do have a Technical support team to assist you in any case when you are eluded by the issue.

    ReplyDelete
  3. Thanks for sharing a great article.Extenderlinksys-usa.com website provide self-help articles and technical support for linksys extender and routers. Call at +1-844-456-4180 toll-free phone number to fix issues associated with Linksys Extenders Setup

    ReplyDelete
  4. Your work will bring a lot of insights into solving our next problem.
    Network services

    ReplyDelete
  5. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Spectrum App On Firestick

    ReplyDelete
  6. Cyberflix TV is one of the most popular apps among Firestick users to get unlimited hours of entertainment that suits your choice. Cyberflix Firestick

    ReplyDelete
  7. Upgrade your network from a slow speed to a fast speed. The Linksys wifi router is a combination of high performance and stability. You can set up your Linksys extender by making use of http extender linksys com You are liable to enjoy advanced wifi features after your setup is done.

    ReplyDelete
  8. Wi-Fi Protected Setup WPS is the smart way to without typing a password. All you need to do is press the TP-Link wifi extender setup wps as shown in the below infographics. After pressing them, they will become on or ready to use within a minute.

    ReplyDelete

  9. TP-link is one of the best Wi-Fi Extenders. It comes with the Backhaul technique. TP-link extender setup is not a difficult task if you follow the below-mentioned steps; TP-link extender setup is not a difficult task. After setting it up, you can find high performance with a better range.

    ReplyDelete
  10. Our wifi extender not working sometimes. It has many reasons such as power is not connected. You can check that all the cables are attached perfectly. There is a need to use the proper username and password of the extender for login. WIFI Extender hub helps you to solve your queries.

    ReplyDelete
  11. Users sometimes face some issues with Netgear extenders or routers. It does not connect with the device. You can take Netgear installation assistant for solutions to the issues you are facing. We easily reset or set up our extenders and use all devices quickly.

    ReplyDelete
  12. We can use the Extender Password in settings. We use it at the time of setup and login. Users can easily change the settings with an extender password. It is also effective in firmware updates in other contexts.

    ReplyDelete
  13. Your information is very helpful.For good internet experience in our home or office need a good walmart.

    ReplyDelete
  14. Is your roomba not connecting to wifi ? Don't worry, we've got you covered! Learn the simple steps to fix the issue and get your Roomba up and running in no time. Say goodbye to frustrating connection problems for good!

    ReplyDelete

Post a Comment