CVE-2018-17873

An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

3.3 LOWAV:A/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.85% chance of exploitation in the next 30 days, 78th percentile

Published

2018-10-23

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/149867/WiFiRanger-7.0.8rc3-Incorrect-Access-Control-…
• Luct0r/CVE-2018-178731★ · 2020-03-19

References

• CVE Record
• NVD entry

Related

• CVE-2018-17872
• CVE-2018-17876
• CVE-2018-17871
• CVE-2018-17878
• CVE-2018-17866
• CVE-2018-17879