CVE-2018-19648

An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-03-27

Last modified

2024-08-05

Weaknesses

CWE-269

Affected products

• Pmaa (Adtran)

References

• https://supportforums.adtran.com/docs/DOC-9344