PRP: CVE-2023-27482 Authentication bypass Lead to RCE in Supervisor API

google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

Apache License 2.0

872 stars 176 forks source link

PRP: CVE-2023-27482 Authentication bypass Lead to RCE in Supervisor API #324

Open secureness opened 1 year ago

secureness commented 1 year ago

There are too many instances of this Application on internet according to shodan it would be great to let me start implementing a tsunami plugin for this critical vulnerability ASAP. References: POC: https://github.com/elttam/publications/blob/master/writeups/home-assistant/supervisor-authentication-bypass-advisory.md Blog Post: https://www.elttam.com/blog/pwnassistant/ GitHub advisory: https://github.com/home-assistant/core/security/advisories/GHSA-2j8f-h4mr-qr25

secureness commented 1 year ago

According to this if we want to Test this CVE by RCE, we must change server configurations, So I recommend that we check if we can access Authorized endpoints or not.

secureness commented 1 year ago

I really like to start implementing a tsunami plugin for it, please give me a ping about current situation of this issue. @maoning @nttran8

secureness commented 1 year ago

Hi @maoning @nttran8 , could you please let me to start implementing this plugin?