Privilege escalation in Advanced Digital Broadcast products - CVE-2018-13110
Published: July 9, 2018 / Updated: June 17, 2021
Vulnerability identifier: #VU13617
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-13110
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a local attacker can gain elevated privileges on the target system.
The weakness exists in ADB broadband gateways / routers based on the Epicentro platform due to unspecified flaw. A local attacker can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate privileges, and perform further attacks.
Affected software
ADB P.RG AV4202N
ADB DV 2210
ADB VV 5522
ADB VV 2220
ADB DV 2210
ADB VV 5522
ADB VV 2220
How to mitigate CVE-2018-13110
Install update from vendor's website.