CVE-2018-13108

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP.

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.58% chance of exploitation in the next 30 days, 75th percentile

Published

2018-07-06

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.sec-consult.com/en/blog/advisories/local-root-jailbreak-via-network-file-shar…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44983

Security advisories

• http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.html
• http://seclists.org/fulldisclosure/2018/Jul/17
• https://www.sec-consult.com/en/blog/advisories/local-root-jailbreak-via-network-file-shar…

References

• CVE Record
• NVD entry