Huawei HG5xx routers reveal sensitive information when they receive a special packet to UDP port 43690. This vulnerability caught my attention because this is a very popular device, worked remotely, and obtains interesting information such as the PPPoE credentials, MAC address, and exact software/firmware version. Let's write a script to exploit these devices:
- To start, create the file huawei-hg5xx-udpinfo.nse and define the required information tags:
description=[[ Tries to obtain the PPPoE credentials, MAC address, firmware version and IP information of the aDSL modems Huawei Echolife 520, 520b, 530 and possibly others by exploiting an information disclosure vulnerability via UDP. The script works by sending a crafted ...
