CVE-2018-13109

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Jul/18Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/542119/100/0/threadedThird Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44982/Third Party Advisory, VDB Entry
https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory
http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.htmlThird Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Jul/18Mailing List, Third Party Advisory
http://www.securityfocus.com/archive/1/542119/100/0/threadedThird Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44982/Third Party Advisory, VDB Entry
https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory

Timeline

Published: Jul 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-13118.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has CVE-2018-131107.5All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers ca CVE-2018-131115.9There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to cra CVE-2018-131127.5get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and app CVE-2018-131137.5The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer CVE-2018-131149.8Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands CVE-2018-131156.5Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP CVE-2018-131169.8/user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table.CVE-2018-13129.8In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not co CVE-2018-131215.5RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) CVE-2018-131226.5onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete File(s) screen, as demonstrat CVE-2018-131239.8onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by