Main Vulnerability Database Vulnerabilities #VU13615

Privilege escalation in Advanced Digital Broadcast products - CVE-2018-13108

Published: July 9, 2018 / Updated: June 17, 2021

Vulnerability identifier: #VU13615

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-13108

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker can gain elevated privileges on the target system.

The weakness exists in ADB broadband gateways / routers based on the Epicentro platform due to a local root jailbreak vulnerability. A local attacker can gain root access to the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP.

Affected software

ADB P.RG AV4202N
ADB DV 2210
ADB VV 5522
ADB VV 2220

How to mitigate CVE-2018-13108

Install update from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #6348 - ADB Broadband Gateways / Routers - Local Root Jailbreak (June 17, 2021)

External References

http://seclists.org/fulldisclosure/2018/Jul/17

Related Security Bulletins

Privilege escalation in ADB Broadband Gateways / Routers