CVE-2018-14533

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-07-31

Last modified

2024-08-05

Affected products

• Iopsys Firmware (Intenogroup)

References

• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
• https://www.exploit-db.com/exploits/45089/