From 68fdb103fef023e8f8fefc0e0cd6a9bc020ef430 Mon Sep 17 00:00:00 2001 From: Grant Willcox Date: Wed, 11 May 2022 09:39:47 -0500 Subject: [PATCH] Add in final touch ups to documentation to fix a typo or two for formatting. Also update exploit ranking since this exploit doesn't retrieve version information before exploiting and is not 100% reliable so Excellent ranking isn't appropriate --- .../modules/exploit/linux/misc/cisco_rv340_sslvpn.md | 6 ++---- modules/exploits/linux/misc/cisco_rv340_sslvpn.rb | 3 ++- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/documentation/modules/exploit/linux/misc/cisco_rv340_sslvpn.md b/documentation/modules/exploit/linux/misc/cisco_rv340_sslvpn.md index 03ff291e5e..6f6279bd86 100644 --- a/documentation/modules/exploit/linux/misc/cisco_rv340_sslvpn.md +++ b/documentation/modules/exploit/linux/misc/cisco_rv340_sslvpn.md @@ -10,7 +10,7 @@ This module has been tested in firmware versions 1.0.03.15 and above and works w Only the [RV340 router](https://www.cisco.com/c/en/us/products/routers/rv340-dual-gigabit-wan-vpn-router/index.html) was tested, but other RV series routers should work out of the box. -For more information, check the advisory [here](https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Austin_2021/flashback_connects/flashback_connects.md) and [here](https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Austin2021/flashback_connects/flashback_connects.md). +For more information, check the advisory [here](https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Austin_2021/flashback_connects/flashback_connects.md) and [here](https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Austin2021/flashback_connects/flashback_connects.md). ## Vulnerable Application @@ -35,8 +35,7 @@ Module options (exploit/linux/misc/cisco_rv340_sslvpn): Name Current Setting Required Description ---- --------------- -------- ----------- Proxies no A proxy chain of format type:host:port[,type:host:port][...] - RHOSTS yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Meta - sploit + RHOSTS yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Metasploit RPORT 8443 yes The target port (TCP) SSL true yes Use SSL VHOST no HTTP server virtual host @@ -61,7 +60,6 @@ Exploit target: ## Scenarios ``` -``` msf6 exploit(linux/misc/cisco_rv340_sslvpn) > check [*] 5.55.55.62:8443 - The service is running, but could not be validated. msf6 exploit(linux/misc/cisco_rv340_sslvpn) > exploit diff --git a/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb b/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb index 8884f023a5..117184a8e0 100644 --- a/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb +++ b/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb @@ -4,10 +4,11 @@ ## class MetasploitModule < Msf::Exploit::Remote - Rank = ExcellentRanking + Rank = GoodRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::Remote::HttpClient + prepend Msf::Exploit::Remote::AutoCheck def initialize(info = {}) super(