#VU13615 Privilege escalation in Advanced Digital Broadcast products - CVE-2018-13108

Vulnerability identifier: #VU13615

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear

CVE-ID: CVE-2018-13108

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerable software:
ADB VV 2220
ADB VV 5522
ADB DV 2210
ADB P.RG AV4202N

Software vendor:
Advanced Digital Broadcast

The weakness exists in ADB broadband gateways / routers based on the Epicentro platform due to a local root jailbreak vulnerability. A local attacker can gain root access to the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP.

Install update from vendor's website.

• http://seclists.org/fulldisclosure/2018/Jul/17