Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-2046. PoCs published by Portcullis.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated information disclosure vulnerability in Broadcom PIPA C211 devices. By sending a crafted XML-RPC request to the `/cgi-bin/rpcBridge` endpoint, an attacker can retrieve sensitive system configuration, including administrative credentials and community strings.
Description
cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to (1) obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcludePaths method or (2) modify the firmware via unspecified vectors.
Exploits (1)
This exploit demonstrates an unauthenticated information disclosure vulnerability in Broadcom PIPA C211 devices. By sending a crafted XML-RPC request to the `/cgi-bin/rpcBridge` endpoint, an attacker can retrieve sensitive system configuration, including administrative credentials and community strings.