A weak password in a Midea system causes Getshell to threaten the Intranet.

A weak password in a Midea system causes Getshell to threaten the Intranet.

Different port addresses are different systems.

WooYun: Getshell is compared to this vulnerability because of a weak password in the marketing system of a dealer in Midea.

Note that the port is different and the interface is different, and the weak password of this vulnerability has been fixed for a long time. However, another 8080 port is opened, which is the vulnerability submitted this time.


Http: // 202.104.30.113: 8080/
 

Still weak password

Weblogic/12345678
 

 

 
I uploaded a shell myself.

Http: // 202.104.30.113: 8080/cK/foot. jsp

Password: test.
 

 

 

Intranetable
 

 

 

Solution:

Delete shell and modify Weak Password