diff --git a/vulnerabilities/samsung/samsung-wlan-ap-lfi.yaml b/vulnerabilities/samsung/samsung-wlan-ap-lfi.yaml index 6a77076f13..a4eb04489f 100644 --- a/vulnerabilities/samsung/samsung-wlan-ap-lfi.yaml +++ b/vulnerabilities/samsung/samsung-wlan-ap-lfi.yaml @@ -1,11 +1,17 @@ id: samsung-wlan-ap-lfi info: - name: Samsung Wlan AP (WEA453e) LFI + name: Samsung WLAN AP WEA453e - Local File Inclusion author: pikpikcu - severity: critical + severity: high + description: Samsung WLAN AP WEA453e is susceptible to local file inclusion vulnerabilities. reference: - - https://iryl.info/2020/11/27/exploiting-samsung-router-wlan-ap-wea453e/ + - https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N + cvss-score: 8.6 + cve-id: + cwe-id: CWE-22 tags: xss,samsung,lfi requests: @@ -23,3 +29,5 @@ requests: - type: status status: - 200 + +# Enhanced by mp on 2022/05/31