carlosevieira / CVE-2022-40684

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

# CVE-2022-40684

CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions.

• Run exploit

USE: python3 exploit.py https://target.com
Ex: python3 exploit.py https://target.com

• Run nuclei template

echo https://target.com | nuclei -t CVE-2022-40684.yaml