Back to Database
Status published
High
CVE-2018-13110
All ADB broadband gateways / routers based on the Epicentro...
Vulnerability Description
All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate their privileges, and perform further attacks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-13110
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/
- http://www.securityfocus.com/archive/1/542118/100/0/threaded
- https://www.exploit-db.com/exploits/44984/
- http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2018/Jul/19
More from adbglobal
View All →CVE-2018-7633
Code injection in the /ui/login form Language parameter in Epicentro...
Critical
9.8
CVE-2018-7632
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to...
High
7.5
CVE-2018-7631
Buffer Overflow in httpd in EpiCentro E_7.3.2+ allows attackers to...
Critical
9.8
CVE-2018-13109
All ADB broadband gateways / routers based on the Epicentro...
High
7.5
CVE-2018-13108
All ADB broadband gateways / routers based on the Epicentro...
High
7.8
Affected Vendor
adbglobal
View all reports →Affected Software
dv2210 firmware, vv2220 firmware, vv5522 firmware, prg av4202n firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 6th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.