nuclei-templates/http/cves/2019/CVE-2019-12583.yaml

47 lines
1.6 KiB
YAML

id: CVE-2019-12583
info:
name: Zyxel ZyWall UAG/USG - Account Creation Access
author: n-thumann,daffainfo
severity: critical
description: Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator via the "Free Time" component. This can lead to unauthorized network access or DoS attacks.
remediation: |
Apply the latest firmware update provided by Zyxel to fix the vulnerability.
reference:
- https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml
- https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/
- https://nvd.nist.gov/vuln/detail/CVE-2019-12583
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
cvss-score: 9.1
cve-id: CVE-2019-12583
cwe-id: CWE-425
epss-score: 0.00481
epss-percentile: 0.73187
cpe: cpe:2.3:o:zyxel:uag2100_firmware:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: zyxel
product: uag2100_firmware
tags: cve,cve2019,zyxel,zywall
http:
- method: GET
path:
- "{{BaseURL}}/free_time.cgi"
matchers-condition: and
matchers:
- type: word
part: body
words:
- "free_time_redirect.cgi?u="
- "&smsOnly=0"
condition: and
- type: status
status:
- 200
# digest: 4a0a0047304502200d11bedcdc94d045ed1e9a8463c58cc5e981312fc0ac3464970c90331705f135022100c258493931547553e310bdd7adb9447f0d3257eddb3c26859e93494dc02900da:922c64590222798bb761d5b6d8e72950