CVE-2018-15358

Published: Aug 17, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0.

Vendor	Product	Versions
Kaspersky Lab	Eltex ESP-200	affected `1.2.0`

References

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-014-eltex-esp-200-router-build-in-user-with-highest-privileges/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-15358

Description

Affected Products

References