exploitDog

CVE-2018-15359

Опубликовано: 17 авг. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.

Ссылки

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-015-eltex-esp-200-router-unsecure-sudo-configuration/
Mitigation
Third Party Advisory
VDB Entry
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-015-eltex-esp-200-router-unsecure-sudo-configuration/
Mitigation
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:eltex:esp-200_firmware:1.2.0:*:*:*:*:*:*:*

cpe:2.3:h:eltex:esp-200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00527

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-c56r-4r5v-wrfc

CVSS3: 8.8

github

больше 3 лет назад

An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.

EPSS

Процентиль: 67%

0.00527

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo