CVE-2018-13110

All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate their privileges, and perform further attacks.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

8.5 HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C

EPSS

6.49% chance of exploitation in the next 30 days, 93th percentile

Published

2018-07-06

Updated

2024-08-05

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.h…
• http://seclists.org/fulldisclosure/2018/Jul/19
• https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manip…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44984

References

• CVE Record
• NVD entry

Related

• CVE-2018-13109
• CVE-2018-13112
• CVE-2018-13108
• CVE-2018-1313
• CVE-2018-13106
• CVE-2018-13134