Update CVE-2024-27497.yaml

http/cves/2024/CVE-2024-27497.yaml

@@ -6,6 +6,10 @@ info:
   severity: high
   description: |
     Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.
+  impact: |
+    Successful exploitation could lead to unauthorized access to the device.
+  remediation: |
+    Upgrade to a patched version of the firmware to mitigate the vulnerability.
   reference:
     - https://warp-desk-89d.notion.site/Linksys-E-2000-efcd532d8dcf4710a4af13fca131a5b8
     - https://nvd.nist.gov/vuln/detail/CVE-2024-27497
@@ -13,7 +17,7 @@ info:
     - https://github.com/fkie-cad/nvd-json-data-feeds
   classification:
     epss-score: 0.00053
-    epss-percentile: 0.19239
+    epss-percentile: 0.19682
   metadata:
     verified: true
     max-request: 1
@@ -29,13 +33,15 @@ http:
     matchers-condition: and
     matchers:
       - type: word
+        part: body
         words:
-          - "session_key"
+          - "var session_key"
           - "close_session"
           - "HELPPATH"
-        part: body
+        condition: and
 
       - type: status
         status:
           - 200
-# digest: 4a0a0047304502210082b0c55e8106691a446e973e050329ed1b1ffe502ed87859d17f9a50e5a516aa022069746f19ab9d5129c75d69207035ef74da6aeaff13325e13380727842b52f7cd:922c64590222798bb761d5b6d8e72950
+
+# digest: 4b0a00483046022100fdcbe55df21e6971b2975945fcc562de49919dfaaf7c7781f14d6ecead7f480f022100b996af9f75123c3248770fc0331b01b1fd355ee1b1ffd2b438e9cfaa202d4786:922c64590222798bb761d5b6d8e72950