TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability

ID: CVE-2024-7332

Severity: critical

Author: s4e-io

Tags: cve,cve2024,totolink

Description

A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747_B20191224. This vulnerability affects an unknown part of the file /web_cste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely without any user interaction.

YAML Source

id: CVE-2024-7332

info:
  name: TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability
  author: s4e-io
  severity: critical
  description: |
    A critical vulnerability has been discovered in TOTOLINK CP450 version 4.1.0cu.747_B20191224. This vulnerability affects an unknown part of the file /web_cste/cgi-bin/product.ini of the Telnet Service component. The issue stems from the use of a hard-coded password, which can be exploited remotely without any user interaction.
  reference:
    - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/CP450/product.md
    - https://nvd.nist.gov/vuln/detail/CVE-2024-7332
    - https://cvefeed.io/vuln/detail/CVE-2024-7332
    - https://www.tenable.com/cve/CVE-2024-7332
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2024-7332
    cwe-id: CWE-259
    epss-score: 0.00045
    epss-percentile: 0.16226
    cpe: cpe:2.3:a:totolink:cp450:4.1.0cu.747_b20191224:*:*:*:*:*:*:*
  metadata:
    max-request: 2
    vendor: totolink
    product: cp450_firmware
    fofa-query: title="totolink"
  tags: cve,cve2024,totolink

http:
  - method: GET
    path:
      - "{{BaseURL}}/web_cste/cgi-bin/product.ini"

    matchers:
      - type: dsl
        dsl:
          - 'contains_all(body,"[PRODUCT]","[WLAN]","HostName")'
          - "status_code == 200"
        condition: and
# digest: 4a0a00473045022100cfad90c76e354aeafe5cf126fcff8682305993b2dccf91978f931c67aff7918a022076c63dae2e5d2ac2231f84eacd5e26be24ce3cdf5370ccbd27256512724f900e:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-7332.yaml"

View on Github