CVEs-PoC/2021/CVE-2021-31698.md

CVE-2021-31698

Description

Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon.

POC

Reference

• https://nns.ee/blog/2021/04/03/modem-rce.html

Github

• https://github.com/189569400/YushuTechUnitreeGo1
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Eliot-Roxbergh/notes_pinephone
• https://github.com/MAVProxyUser/YushuTechUnitreeGo1
• https://github.com/nnsee/jekyll-cve-badge