Add detection for CVE-2024-8956 and CVE-2024-8957

[nmasdoufi-ol]

Agent Asteroid Implementation for CVE-2024-8956 and CVE-2024-8957

Summary

This pull request introduces detection and exploitation support for two critical vulnerabilities in the ValueHD PTZ Camera firmware below version 6.3.40:

• CVE-2024-8956: Authentication Bypass
• CVE-2024-8957: Command Injection via NTP server configuration

Both vulnerabilities are cataloged as CRITICAL due to their potential impact on device security.

Changes

1. Detection Mechanisms:

   • Authentication Bypass: Detects bypass vulnerability by checking for vulnerable firmware versions on the /cgi-bin/param.cgi?get_device_conf endpoint.
   • Command Injection: Attempts to execute a command by injecting code into the NTP configuration on the /cgi-bin/param.cgi?post_network_other_conf endpoint.
   • Accept Pattern: Matches against versioninfo="SOC v\d+\.\d+\.\d+ to confirm firmware version compatibility.
   • Version Validation: Checks if the firmware version is below 6.3.40, marking it as vulnerable if true.

2. Metadata Adjustments:

   • Added reference field to support both str and list[str] types for better handling of multiple CVE references.

3. Enhancements in webexploit.py:

   • Improved _create_vulnerability() method to support multiple references.
   • Added detailed NVD links for each CVE reference, enabling quick access to official CVE details.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.35%. Comparing base (c842f73) to head (9102d50).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #131      +/-   ##
==========================================
+ Coverage   96.28%   96.35%   +0.06%     
==========================================
  Files         166      168       +2     
  Lines        5891     6001     +110     
==========================================
+ Hits         5672     5782     +110     
  Misses        219      219              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[3asm]

Sorry but this is not clean, we simply need to switch to references of list[str] only and changes all the other code.