Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-33174. PoCs published by Henry4E36. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python script that exploits CVE-2022-33174, an authentication bypass vulnerability in Powertek PDU devices. The exploit retrieves sensitive credentials by accessing a specific CGI endpoint without authentication.
Description
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext.
Exploits (1)
This repository contains a functional Python script that exploits CVE-2022-33174, an authentication bypass vulnerability in Powertek PDU devices. The exploit retrieves sensitive credentials by accessing a specific CGI endpoint without authentication.
Nuclei Templates (1)
http.html:"Powertek" || http.html:"powertek"
body="powertek"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H