Compare commits

...
Author SHA1 Message Date
Prince Chaddha 34da6336a3 Move CVE-2025-8286 to correct directory and improve template
- Move template from http/cves/2025/ to network/cves/2025/ (TCP protocol)
- Update name to follow format guidelines
- Add max-request metadata
- Improve description clarity
- Add guralp vendor tag
- Fix FOFA query formatting
- Remove trailing spaces
2025-08-01 08:15:10 -07:00
Chris 3c26069bab Increase banner size 2025-08-01 16:09:51 +02:00
Chris 9d159b4b6a Add CVE-2025-8286 - Güralp Systems FMUS 2025-08-01 15:55:09 +02:00
+71
View File
@@ -0,0 +1,71 @@
id: CVE-2025-8286
info:
name: Güralp Systems FMUS Series - Missing Authentication for Critical Function
severity: critical
author: darses
description: |
Güralp Systems FMUS Series Seismic Monitoring Devices expose an unauthenticated Telnet-based command line interface that allows attackers to modify hardware configurations, manipulate data, or factory reset the device.
impact: |
Successful exploitation of this vulnerability could allow an attacker to modify hardware configurations, manipulate data, or factory reset the device.
remediation: |
Update to the latest firmware version or apply vendor recommended patches to secure Telnet access.
classification:
cwe-id: CWE-306
cve-id: CVE-2025-8286
cvss-metrics: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
cvss-score: 9.8
metadata:
vendor: guralp_systems
product: fmus_series_seismic_monitoring_devices
max-request: 2
shodan-query: '"Welcome to " "list of available commands" port:4244'
fofa-query: '"Welcome to " && "list of available commands" && port="4244"'
reference:
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01
- https://www.cve.org/CVERecord?id=CVE-2025-8286
tags: ics,cve,cve2025,tcp,telnet,guralp
tcp:
- host:
- "{{Hostname}}"
port: 4244
inputs:
- data: "\n"
read: 256
name: banner
- data: "system info\n"
read: 256
name: system_info
matchers-condition: and
matchers:
- type: word
part: banner
words:
- "Welcome to "
- 'type "help" for a list of available commands'
condition: and
- type: word
part: system_info
words:
- "Host Name: "
- "Firmware Version: "
condition: and
extractors:
- type: regex
part: system_info
group: 1
regex:
- "Host\\s+Name:\\s+([\\w\\d\\.\\-]+)"
- type: regex
part: system_info
group: 1
regex:
- "Firmware\\s+Version:\\s+([\\d\\.\\-]+)"