CVE-2018-15556

Опубликовано: 27 июн. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using the enabled onboard UART headers.

Ссылки

http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Jun/1
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Jun/1
Exploit
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Jun/1
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Jun/1
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:actiontec:web6000q_firmware:1.1.02.22:*:*:*:*:*:*:*

cpe:2.3:h:actiontec:web6000q:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02542

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-v283-23g5-fgc8