PT-2018-11606 · Adb · Adb Broadband Gateways

Johannes Greil + 1 · Publicado 2018-07-06 · Atualizado 2019-10-03 · CVE-2018-13110

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ADB broadband gateways / routers based on the Epicentro platform (affected versions not specified)

Description A privilege escalation issue affects the devices, allowing attackers to access the command line interface (CLI) if it was previously disabled by the ISP, escalate privileges, and conduct further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-13110

Produtos afetados

Adb Broadband Gateways

Referências · 6

• 🔥 https://sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Jul/19 · Exploit
• 🔥 http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/44984 · Exploit
• http://securityfocus.com/archive/1/542118/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-13110 · Nota de Segurança