CVE-2022-31793
HIGH EXPLOITED NUCLEImuhttpd < 1.1.7 - Path Traversal via Single-Character Prefix Bypass
Title source: llmExploitation Summary
CVE-2022-31793 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including xpgdgit. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits a path traversal vulnerability in Muhttpd web server (CVE-2022-31793) by sending a crafted HTTP GET request to read arbitrary files. It supports both single target and bulk testing via a list of IPs, with options for verification or custom file path reading.
Description
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.
Exploits (1)
This PoC exploits a path traversal vulnerability in Muhttpd web server (CVE-2022-31793) by sending a crafted HTTP GET request to read arbitrary files. It supports both single target and bulk testing via a list of IPs, with options for verification or custom file path reading.
Nuclei Templates (1)
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N