diff --git a/cves/2018/CVE-2018-9995.yaml b/cves/2018/CVE-2018-9995.yaml new file mode 100644 index 0000000000..ad5b3eac71 --- /dev/null +++ b/cves/2018/CVE-2018-9995.yaml @@ -0,0 +1,25 @@ +id: CVE-2018-9995 +info: + name: DVR Authentication Bypass + author: princechaddha + severity: high + reference: https://nvd.nist.gov/vuln/detail/CVE-2018-9995 + tags: cve,cve2018,auth-bypass + +requests: + - method: GET + path: + - "{{BaseURL}}/device.rsp?opt=user&cmd=list" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "\"uid\":" + - "playback" + condition: and + part: body