CVE-2018-15359

An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.

Score

CVSS 3.0 8.8 High

Status

Modified - vulnerability@kaspersky.com

Published

2018-08-17

Last modified

2024-08-05

Affected products

• Esp-200 Firmware (Eltex)
• Eltex Esp-200 (Kaspersky Lab)

References

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-015-eltex-esp-200-router-unsecure-sudo…