.. / CVE-2014-9614

• Auth Bypass
• Nuclei
• Web

Exploit for Netsweeper 4.0.5 - Default Weak Account (CVE-2014-9614)

Description:

The Web Panel in Netsweeper before 4.0.5 has a default password of ‘branding’ for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/.

Nuclei Template

View the template here CVE-2014-9614.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2014/CVE-2014-9614.yaml

References: