Skip to content

Commit 4674089

Browse files
committed
Updated as per Juan Vazquez's comments.
1 parent 043ce5a commit 4674089

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

modules/auxiliary/admin/huawei/huawei_wifi_info.rb

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,9 +12,9 @@ class Metasploit3 < Msf::Auxiliary
1212

1313
def initialize(info={})
1414
super(update_info(info,
15-
'Name' => "Huawei Datacard, Information Disclosure Vulnerability",
15+
'Name' => "Huawei Datacard Information Disclosure Vulnerability",
1616
'Description' => %q{
17-
This module exploits an un-authenticated information disclosure vulnerability (CWE-425) in Huawei
17+
This module exploits an un-authenticated information disclosure vulnerability in Huawei
1818
SOHO routers. The module will gather information by accessing the /api pages where
1919
authentication is not required, allowing configuration changes
2020
as well as information disclosure including any stored SMS.
@@ -23,12 +23,13 @@ def initialize(info={})
2323
'Author' =>
2424
[
2525
'Jimson K James.',
26-
'tomsmaily [at] aczire.com', #Msf module
26+
'tomsmaily[at]aczire.com', #Msf module
2727
],
2828
'References' =>
2929
[
30+
[ 'CWE', '425' ],
3031
[ 'CVE', '2013-6031' ],
31-
[ 'URL', 'http://www.kb.cert.org/vuls/id/341526' ],
32+
[ 'US-CERT-VU', '341526' ],
3233
[ 'URL', 'http://www.huaweidevice.co.in/Support/Downloads/' ],
3334
],
3435
'DisclosureDate' => "Nov 11 2013" ))
@@ -169,13 +170,13 @@ def get_router_info
169170
})
170171

171172
#check whether we got any response from server and proceed.
172-
if not res
173+
unless res
173174
print_error("Failed to get any response from server!!!")
174175
return
175176
end
176177

177178
#Is it a HTTP OK
178-
if (res.code == 200)
179+
unless res.code == 200
179180
print_status("Okay, Got an HTTP 200 (okay) code. Verifying Server header")
180181
else
181182
print_error("Did not get HTTP 200, URL was not found. Exiting!")

0 commit comments

Comments
 (0)