ANHENG Mingyu Security Gateway RCE

13766 Views 5 Replies Harry Potter
#
09-12-2023, 02:12 PM |
Description:
Mingyu Security Gateway adheres to the concept of security, visualization, simplicity, and effectiveness. From the perspective of assets, it constructs a next-generation security protection system for full process defense, and integrates traditional firewalls, intrusion prevention systems, antivirus gateways, internet behavior control, VPN gateways, threat intelligence and other security modules into an intelligent security gateway. At the same time, it adopts an advanced high-performance multi-core architecture, equipped with a hardware platform with rich interfaces, combined with comprehensive network layer support such as intelligent routing, and dual machine hot standby to ensure efficient and reliable business processing, and flexible and comprehensive scene support. This product has arbitrary command execution, allowing attackers to gain server privileges through this vulnerability.
 
Exploit:

Hidden Content


Reply to this thread to unlock the contents
ATTACHMENTS
#
09-12-2023, 02:19 PM |
fofa test: 

https://fofa.info/result?qbase64=Ym9keT0...WzIg%3D%3D
#
12-13-2023, 06:06 AM |
(09-12-2023, 02:12 PM)Harry Potter Wrote: Description:
Mingyu Security Gateway adheres to the concept of security, visualization, simplicity, and effectiveness. From the perspective of assets, it constructs a next-generation security protection system for full process defense, and integrates traditional firewalls, intrusion prevention systems, antivirus gateways, internet behavior control, VPN gateways, threat intelligence and other security modules into an intelligent security gateway. At the same time, it adopts an advanced high-performance multi-core architecture, equipped with a hardware platform with rich interfaces, combined with comprehensive network layer support such as intelligent routing, and dual machine hot standby to ensure efficient and reliable business processing, and flexible and comprehensive scene support. This product has arbitrary command execution, allowing attackers to gain server privileges through this vulnerability.
 
Exploit:
#
02-13-2024, 10:57 AM |
ty - interesting
#
05-09-2024, 05:43 AM |
nice exploit need more like this.....
#
07-23-2024, 02:30 PM |
Good Job n Thank you
Thread Info
AuthorHarry Potter
Posted
Views13766
Replies5
Participants6

This board is for authorized security research only. Attacking systems without permission is illegal. The community follows responsible disclosure.