nuclei-templates/http/cves/2020/CVE-2020-35338.yaml

47 lines
1.5 KiB
YAML
Raw Normal View History

id: CVE-2020-35338
info:
name: Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection
author: Jeya Seelan
severity: critical
description: Wireless Multiplex Terminal Playout Server <=20.2.8 has a default account with a password of pokon available via its web administrative interface.
2023-09-06 12:22:36 +00:00
remediation: |
Change the default credentials to strong and unique ones.
reference:
- https://jeyaseelans.medium.com/cve-2020-35338-9e841f48defa
- https://nvd.nist.gov/vuln/detail/CVE-2020-35338
- https://www.mobileviewpoint.com/
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2020-35338
cwe-id: CWE-798
2023-10-14 11:27:55 +00:00
epss-score: 0.09782
epss-percentile: 0.94158
2023-09-06 12:22:36 +00:00
cpe: cpe:2.3:a:mobileviewpoint:wireless_multiplex_terminal_playout_server:*:*:*:*:*:*:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: mobileviewpoint
product: wireless_multiplex_terminal_playout_server
tags: cve,cve2020,wmt,default-login
http:
- method: GET
path:
- "{{BaseURL}}/server/"
2023-07-11 19:49:27 +00:00
headers:
Authorization: "Basic OnBva29u"
matchers-condition: and
matchers:
- type: word
words:
- "<title>WMT Server playout"
2023-07-11 19:49:27 +00:00
- type: status
status:
- 200
# digest: 490a004630440220742073f7bcb64ef06eb2b40f95e664085df6b2d5091f3ed041a1769076857ba802200d02cffedb91a9156505e048a10b9ab15ea9b41bb56e0b7d7ddedb8cedb058b1:922c64590222798bb761d5b6d8e72950