PT-2018-11606 · Adb · Adb Broadband Gateways

Johannes Greil + 1 · Published 2018-07-06 · Updated 2019-10-03 · CVE-2018-13110

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ADB broadband gateways / routers based on the Epicentro platform (affected versions not specified)

Description A privilege escalation issue affects the devices, allowing attackers to access the command line interface (CLI) if it was previously disabled by the ISP, escalate privileges, and conduct further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-13110

Affected Products

Adb Broadband Gateways

References · 6

• 🔥 https://sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Jul/19 · Exploit
• 🔥 http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/44984 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-13110 · Security Note
• http://securityfocus.com/archive/1/542118/100/0/threaded · Note