安全研究
CVE-2024-52875 Kerio Control CRLF 注入到 1-click RCE：防火墙的静默沦陷
Thinking
2024-12-16
3 分钟阅读
研究档案
#漏洞分析#代码审计#Web安全
Kerio Control 防火墙的 Web 管理接口未过滤 CRLF 字符，攻击者构造恶意链接诱导管理员点击，1-click 就能拿到防火墙的 shell。
Unlock to view this content.
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