Auth bypass in Adbglobal Dv2210
CVE-2018-13109
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.355 (98.4th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.359 · newest: 0.355 · change: -0.004
Affected products
Weakness classification (CWE)
References
- seclists.org/fulldisclosure/2018/Jul/18 (mailing-list, Mailing List, Third Party Advisory)
- www.exploit-db.com/exploits/44982/ (VDB Entry, Third Party Advisory, exploit)
- packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html (VDB Entry, Third Party Advisory)
- www.securityfocus.com/archive/1/542119/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)
- www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadban… (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-13109?
- CVE-2018-13109 is a high-severity vulnerability in Adbglobal Dv2210, classified under Incorrect Authorization. CVSS score: 7.5/10. Published 2018-07-06.
- How severe is CVE-2018-13109?
- High severity. CVSS v3 base score is 7.5 out of 10.