#VU15585 Privilege escalation in CT50-Ex - CVE-2018-14825
Published: October 30, 2018 / Updated: October 31, 2018
Vulnerability identifier: #VU15585
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-14825
CWE-ID: CWE-269
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
CT50-Ex
CT50-Ex
Software vendor:
PEPPERL+FUCHS
PEPPERL+FUCHS
Description
The vulnerability allows a remote attacker to gain elevated privileges on the target system.
The vulnerability exists due to improper privilege management. A remote unauthenticated attacker with advanced knowledge of the target system can create an application that would bind to the service, gain elevated system privileges and obtain access to keystrokes, passwords, personally identifiable information, photos, emails, or business-critical documents.
Remediation
Install update from vendor's website.