nuclei-templates/http/misconfiguration/dlink-unauth-cgi-script.yaml

id: dlink-unauth-cgi-script

info:
  name: D-Link DNS Series  CGI Script - Unauthenticated
  author: pussycat0x
  severity: low
  description: |
    A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET request, affecting over 920,000 devices on the Internet.
  reference:
    - https://github.com/netsecfish/info_cgi
  metadata:
    verified: true
    fofa-query: app="D_Link-DNS"
  tags: unauth,dlink,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}/cgi-bin/info.cgi"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Product="
          - "Version="
          - "Model="
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a00473045022013515fb6fecbf582bff3d7ebc011f605fdc4f78489410dd60b20aaaf5897738f022100bbeb97639070b484f197a35e44238f2da97d55612eb229b094ecacf589e20ec7:922c64590222798bb761d5b6d8e72950
Create dlink-unauth-cgi-script.yaml 2024-04-09 17:17:44 +00:00			`id: dlink-unauth-cgi-script`
update matcher 2024-04-10 06:00:03 +00:00
Create dlink-unauth-cgi-script.yaml 2024-04-09 17:17:44 +00:00			`info:`
			`name: D-Link DNS Series CGI Script - Unauthenticated`
Update dlink-unauth-cgi-script.yaml 2024-04-09 17:31:33 +00:00			`author: pussycat0x`
Create dlink-unauth-cgi-script.yaml 2024-04-09 17:17:44 +00:00			`severity: low`
			`description: \|`
			`A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET request, affecting over 920,000 devices on the Internet.`
			`reference:`
			`- https://github.com/netsecfish/info_cgi`
			`metadata:`
			`verified: true`
			`fofa-query: app="D_Link-DNS"`
			`tags: unauth,dlink,misconfig`

			`http:`
			`- method: GET`
			`path:`
			`- "{{BaseURL}}/cgi-bin/info.cgi"`

added condition 2024-04-10 06:09:42 +00:00			`matchers-condition: and`
Create dlink-unauth-cgi-script.yaml 2024-04-09 17:17:44 +00:00			`matchers:`
			`- type: word`
			`words:`
			`- "Product="`
			`- "Version="`
update matcher 2024-04-10 06:00:03 +00:00			`- "Model="`
Create dlink-unauth-cgi-script.yaml 2024-04-09 17:17:44 +00:00			`condition: and`

			`- type: status`
			`status:`
			`- 200`
Auto Template Signing [Wed Apr 10 06:21:34 UTC 2024] :robot: 2024-04-10 06:21:34 +00:00			`# digest: 4a0a00473045022013515fb6fecbf582bff3d7ebc011f605fdc4f78489410dd60b20aaaf5897738f022100bbeb97639070b484f197a35e44238f2da97d55612eb229b094ecacf589e20ec7:922c64590222798bb761d5b6d8e72950`