VulnerabilityModified

CVE-2018-13110

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate their privileges,…

HIGH 7.5EPSS 6.41%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (6.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 6.41% probability · 93th percentile
CISA KEV: Not listed
Weakness: CWE-732
Affected: adbglobal/dv2210 firmware · adbglobal/vv2220 firmware · adbglobal/vv5522 firmware · adbglobal/prg av4202n firmware
Source: cve@mitre.org

References

http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Jul/19Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/542118/100/0/threadedThird Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44984/Exploit, Third Party Advisory, VDB Entry
https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory
http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Jul/19Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/542118/100/0/threadedThird Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44984/Exploit, Third Party Advisory, VDB Entry
https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.