Vulnerability Details CVE-2017-6896
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://seclists.org/fulldisclosure/2017/Mar/52
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing
- https://packetstormsecurity.com/files/141693/digisol-escalate.txt
- https://www.exploit-db.com/exploits/41633/
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltion
- http://seclists.org/fulldisclosure/2017/Mar/52
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing
- https://packetstormsecurity.com/files/141693/digisol-escalate.txt
- https://www.exploit-db.com/exploits/41633/
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltion
Products affected by CVE-2017-6896
-
cpe:2.3:h:digisol:dg-hr1400_router:-
-
cpe:2.3:o:digisol:dg-hr1400_router_firmware:1.00.02