CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2018-15358

An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-014-eltex-esp-200-router-build-in-user-with-highest-privileges/
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-014-eltex-esp-200-router-build-in-user-with-highest-privileges/

Products affected by CVE-2018-15358

Eltex » Esp-200 » Version: N/A

cpe:2.3:h:eltex:esp-200:-
Eltex » Esp-200 Firmware » Version: 1.2.0

cpe:2.3:o:eltex:esp-200_firmware:1.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-15358

Products

Pricing

Contact Us