CyberPower - Missing Authentication
ID: CVE-2024-32735
Severity: critical
Author: DhiyaneshDK
Tags: cve,cve2024,cyberpower,auth-bupass
Description
Section titled “Description”An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3.
YAML Source
Section titled “YAML Source”id: CVE-2024-32735
info: name: CyberPower - Missing Authentication author: DhiyaneshDK severity: critical description: | An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. impact: | An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application. reference: - https://www.cyberpower.com/global/en/File/GetFileSampleByType?fileId=SU-18070002-07&fileSubType=FileReleaseNote - https://www.tenable.com/security/research/tra-2024-14 - https://nvd.nist.gov/vuln/detail/CVE-2024-32735 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2024-32735 cwe-id: CWE-306 epss-score: 0.00043 epss-percentile: 0.09691 metadata: verified: true max-request: 1 shodan-query: html:"<title>PDNU</title>" tags: cve,cve2024,cyberpower,auth-bupass
http: - method: GET path: - "{{BaseURL}}/api/v1/devices"
matchers-condition: and matchers: - type: word part: body words: - '"account":' - '"passwd":' - 'status":"success' condition: and
- type: word part: content_type words: - 'application/json'
- type: status status: - 200# digest: 490a0046304402202b4fe0657b2f085aa291b782e589f72a37c04cd537b59c71fb36916c76cd1b6a02201070eb1290c51082a76541613b32e571ad7375e6ca63dc2f9f85f1c2c14fce17:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-32735.yaml"