{"vulnerability": "CVE-2022-4154", "sightings": [{"uuid": "04a17a6b-ad29-438c-933c-601511e29920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41544", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51475", "content": "", "creation_timestamp": "2023-05-23T00:00:00.000000Z"}, {"uuid": "66b91725-734c-4679-a66c-cd38546ac547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihukwjyfn2t", "content": "", "creation_timestamp": "2025-02-18T18:15:56.786795Z"}, {"uuid": "38f87c86-c598-457d-bd7f-4e8cb2efdcde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lik6ncn6l72m", "content": "", "creation_timestamp": "2025-02-19T16:21:33.746182Z"}, {"uuid": "0aa89cd6-3caf-4836-aed1-d625af42a650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809820972930", "content": "", "creation_timestamp": "2025-02-19T17:49:01.264628Z"}, {"uuid": "86d99248-c84f-4116-a1dd-0e73b1697014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3likycgdk522n", "content": "", "creation_timestamp": "2025-02-20T00:00:45.574395Z"}, {"uuid": "73f42d2e-4602-4a29-a964-1c6313e37b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lilhtigc622t", "content": "", "creation_timestamp": "2025-02-20T04:38:46.832875Z"}, {"uuid": "7b1c3535-18f4-4855-bcfc-66cd960baf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lilj6owmza24", "content": "", "creation_timestamp": "2025-02-20T05:02:53.924797Z"}, {"uuid": "2fea5538-06ad-4060-84b9-a4f3b2feb737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2022-41545", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lilndzslvc23", "content": "", "creation_timestamp": "2025-02-20T06:17:28.021341Z"}, {"uuid": "d9d53486-a590-4a12-bc03-1386af42c12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3limmhmgpak2e", "content": "", "creation_timestamp": "2025-02-20T15:34:16.493986Z"}, {"uuid": "03129652-ba76-45ce-ab04-c141caed87ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3llgwcvmhuv2w", "content": "", "creation_timestamp": "2025-03-28T13:30:09.628556Z"}, {"uuid": "cc70aea5-63ed-42db-b907-56a25f9de158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7798", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-41545\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transport security by default, this renders the administrative credentials vulnerable to eavesdropping by an adversary during every authenticated request made by a client to the router over a WLAN, or a LAN, should the adversary be able to perform a man-in-the-middle attack.\n\ud83d\udccf Published: 2025-02-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T16:18:48.779Z\n\ud83d\udd17 References:\n1. https://www.netgear.com/about/security/\n2. https://www.netgear.com/images/datasheet/networking/cablemodems/C7800.pdf\n3. https://seclists.org/fulldisclosure/2025/Feb/12", "creation_timestamp": "2025-03-17T16:47:35.000000Z"}, {"uuid": "34f0b923-ad43-4792-bc43-1acc77182ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-41544\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.\n\ud83d\udccf Published: 2022-10-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T19:23:50.244Z\n\ud83d\udd17 References:\n1. https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352\n2. http://packetstormsecurity.com/files/172553/GetSimple-CMS-3.3.16-Shell-Upload.html", "creation_timestamp": "2025-05-13T19:30:52.000000Z"}, {"uuid": "947e2466-9a08-40f1-8b15-761b412f4baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "seen", "source": "https://t.me/CyberBulletin/2363", "content": "\u26a1CVE-2022-41545: Netgear C7800 Router Flaw Exposes User Credentials, No Patch.\n\n#CyberBulletin", "creation_timestamp": "2025-02-20T11:17:23.000000Z"}, {"uuid": "d80a22e3-1e3b-4c81-a457-d41e747f3854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41545", "type": "published-proof-of-concept", "source": "Telegram/Ydf82T2Ave2z1AxcCNu8KCRB4Pcaw9BskuZRRNndD8mBDwk", "content": "", "creation_timestamp": "2025-02-17T20:00:06.000000Z"}, {"uuid": "d3caed50-ab9e-4cfb-ad3c-4d9e419b31c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41544", "type": "seen", "source": "https://t.me/cibsecurity/51673", "content": "\u203c CVE-2022-41544 \u203c\n\nGetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T18:14:14.000000Z"}, {"uuid": "c3ef0019-0480-49b5-a380-2cf4d97626d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41547", "type": "seen", "source": "https://t.me/cibsecurity/51671", "content": "\u203c CVE-2022-41547 \u203c\n\nMobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.py script. This vulnerability allows attackers to read arbitrary files via a crafted HTTP request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T18:14:11.000000Z"}, {"uuid": "13206dca-5ac6-41f1-90d3-f46a3945189c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41540", "type": "seen", "source": "https://t.me/cibsecurity/51675", "content": "\u203c CVE-2022-41540 \u203c\n\nThe web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. Attackers who are able to intercept the communications between the web client and router through a man-in-the-middle attack can then obtain the sequence key via a brute-force attack, and access sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T18:14:18.000000Z"}, {"uuid": "db86d405-0230-4af3-857a-d928e9d73d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41542", "type": "seen", "source": "https://t.me/cibsecurity/51587", "content": "\u203c CVE-2022-41542 \u203c\n\ndevhub 0.102.0 was discovered to contain a broken session control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-17T18:13:12.000000Z"}, {"uuid": "2f979b41-df19-4d17-92f8-bcda299cb4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-41541", "type": "seen", "source": "https://t.me/cibsecurity/51680", "content": "\u203c CVE-2022-41541 \u203c\n\nTP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-18T18:14:24.000000Z"}]}