JUNG Smart Visu Server 1.1.1050 - Dos

ExploitDBExploitDB exploitExploitEDB-52536

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

ExploitDB
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

Python script that sends an unauthenticated POST request to /cgi-bin/reboot.sh or /cgi-bin/shutdown.sh on a JUNG Smart Visu Server to trigger a remote reboot or shutdown, causing denial of service.

Backdoor review

No backdoor observed in reviewed code

The PoC script sends an unauthenticated POST request to /cgi-bin/reboot.sh or /cgi-bin/shutdown.sh on the target JUNG Smart Visu Server to trigger a denial-of-service condition. No backdoor, deceptive payload, persistence mechanism, credential theft, or unrelated remote access behavior is present. The code performs only the advertised DoS action.

ClassificationExploit
Model confidence95%
AuthenticationNot required
LanguagesPython
Target softwareJUNG Smart Visu Server
Attack typesDenial of Service
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The script actively sends a crafted request to trigger a server reboot or shutdown, which is the intended exploitation of the vulnerability, not merely detection.

exploits/multiple/webapps/52536.py:29-33exploits/multiple/webapps/52536.py:60-63exploits/multiple/webapps/52536.py:88

Requirements

  • Target running JUNG Smart Visu Server <= 1.1.1050exploits/multiple/webapps/52536.py:10
  • Network access to the target serverexploits/multiple/webapps/52536.py:111

Observed behavior

  • Sends an unauthenticated POST request to /cgi-bin/reboot.sh or /cgi-bin/shutdown.shexploits/multiple/webapps/52536.py:30-33exploits/multiple/webapps/52536.py:66-73
  • Interprets HTTP 200, 302, 301, timeout, or connection error as likely successful exploitationexploits/multiple/webapps/52536.py:78-98
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Url
/cgi-bin/reboot.shEndpoint targeted by the PoC to trigger a server reboot.exploits/multiple/webapps/52536.py:31
Url
/cgi-bin/shutdown.shEndpoint targeted by the PoC to trigger a server shutdown.exploits/multiple/webapps/52536.py:32
Http Method
POSTHTTP method used to send the exploit request.exploits/multiple/webapps/52536.py:66
Review boundaries

What the analysis did not establish

  • Only the single Python file was analyzed; no external libraries or referenced resources were inspected.
  • The script's actual effectiveness or safety was not tested; classification is based solely on code intent.
  • Only the supplied text file was reviewed; no binary files or external resources were inspected.
  • The review does not assess whether the target endpoints are actually vulnerable or whether the script works as intended.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1