CVE-2018-14533

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Inteno’s IOPSYS - (Authenticated) Local Privilege Escalation2018-07-21 · local · linux

Impact

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.

Affected products

References

• NVD record
• CVE.org record
• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
• https://www.exploit-db.com/exploits/45089/
• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
• https://www.exploit-db.com/exploits/45089/