high7.5Public exploit code
CVE-2018-13109
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ADB Broadband Gateways / Routers - Authorization Bypass2018-07-05 · webapps · hardware
Impact
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adbglobal | Dv2210 Firmware | All versions |
| Adbglobal | Vv2220 Firmware | All versions |
| Adbglobal | Vv5522 Firmware | All versions |
| Adbglobal | Prg Av4202n Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html
- http://seclists.org/fulldisclosure/2018/Jul/18
- http://www.securityfocus.com/archive/1/542119/100/0/threaded
- https://www.exploit-db.com/exploits/44982/
- https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/
- http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html
- http://seclists.org/fulldisclosure/2018/Jul/18
- http://www.securityfocus.com/archive/1/542119/100/0/threaded
- https://www.exploit-db.com/exploits/44982/
- https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/