PT-2018-11083 · Momentum · Momentum Axel 720P

Publicado 2018-06-12 · Atualizado 2019-10-03 · CVE-2018-12259

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Momentum Axel 720P version 5.1.8

Description An issue allows root access to be obtained via UART pins without restrictions, leading to full system compromise.

Recommendations For version 5.1.8, restrict physical access to the UART pins to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-12259

Produtos afetados

Momentum Axel 720P

Referências · 3

• 🔥 https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2018-12259 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12259 · Nota de Segurança