3 Pre-Auth RCE’s in YeaLink DM, VoipMonitor, TG8 Firewall

Identification of VoiPMonitor: (CVE-2021–30461)

 

Shodan:

Shodan Search results for query VoipMonitor

 

 

Censys:

 


Shodan cli enum results for target using favicon hash

Writing Nuclei Template: CVE-2021–30461

nuclei template for VoipMonitor

Running Nuclei Template

 

Writing Nuclei Template G8 Firewall PreAuth RCE: CVE Pending

 

Running Nuclei Template
Template Link: https://github.com/shifa123/mytemplates/tree/main

 

Writing Nuclei Template YeaLink DM PreAuth RCE: (CVE-2021–27561/27562)

 

Running Nuclei Template
 
Reporting the Vulnerability