CVE-2018-13109

HOCH 7.5CVE-2018-13109 · Published 06/07/2018 · updated 17/06/2026

Kurz gesagt

CVE-2018-13109 ist eine Schwachstelle (HOCH (CVSS 7.5)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 35.5%, höher als bei 98.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.

References

packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html · Third Party Advisory
seclists.org/fulldisclosure/2018/Jul/18 · Mailing List
securityfocus.com/archive/1/542119/100/0/threaded · Third Party Advisory
exploit-db.com/exploits/44982 · Third Party Advisory
sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free