Add in final touch ups to documentation to fix a typo or two for formatting. Also update exploit ranking since this exploit doesn't retrieve version information before exploiting and is not 100% reliable so Excellent ranking isn't appropriate
This commit is contained in:
@@ -10,7 +10,7 @@ This module has been tested in firmware versions 1.0.03.15 and above and works w
|
||||
|
||||
Only the [RV340 router](https://www.cisco.com/c/en/us/products/routers/rv340-dual-gigabit-wan-vpn-router/index.html) was tested, but other RV series routers should work out of the box.
|
||||
|
||||
For more information, check the advisory [here](https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Austin_2021/flashback_connects/flashback_connects.md) and [here](https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Austin2021/flashback_connects/flashback_connects.md).
|
||||
For more information, check the advisory [here](https://github.com/pedrib/PoC/blob/master/advisories/Pwn2Own/Austin_2021/flashback_connects/flashback_connects.md) and [here](https://github.com/rdomanski/Exploits_and_Advisories/blob/master/advisories/Pwn2Own/Austin2021/flashback_connects/flashback_connects.md).
|
||||
|
||||
|
||||
## Vulnerable Application
|
||||
@@ -35,8 +35,7 @@ Module options (exploit/linux/misc/cisco_rv340_sslvpn):
|
||||
Name Current Setting Required Description
|
||||
---- --------------- -------- -----------
|
||||
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
|
||||
RHOSTS yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Meta
|
||||
sploit
|
||||
RHOSTS yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Metasploit
|
||||
RPORT 8443 yes The target port (TCP)
|
||||
SSL true yes Use SSL
|
||||
VHOST no HTTP server virtual host
|
||||
@@ -61,7 +60,6 @@ Exploit target:
|
||||
|
||||
## Scenarios
|
||||
```
|
||||
```
|
||||
msf6 exploit(linux/misc/cisco_rv340_sslvpn) > check
|
||||
[*] 5.55.55.62:8443 - The service is running, but could not be validated.
|
||||
msf6 exploit(linux/misc/cisco_rv340_sslvpn) > exploit
|
||||
|
||||
Reference in New Issue
Block a user