eltex records
5 published records for vendor eltex.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2018-15356No exploit | An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.eltex · esp-200 firmware · CWE-77 | High8.8 | — | 2.5% | Aug 17, 2018 |
35Monitor | CVE-2018-15359No exploit | An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware versioneltex · esp-200 firmware | High8.8 | — | 1.6% | Aug 17, 2018 |
35Monitor | CVE-2018-15358No exploit | An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmwareltex · esp-200 firmware · CWE-20 | High8.8 | — | 1.3% | Aug 17, 2018 |
29Monitor | CVE-2018-15360No exploit | An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0.eltex · esp-200 firmware · CWE-798 | High7.3 | — | 1.6% | Aug 17, 2018 |
26Monitor | CVE-2018-15357No exploit | An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.eltex · esp-200 firmware · CWE-200 | Medium6.5 | — | 1.1% | Aug 17, 2018 |
- CVE-2018-1535636Monitor
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.
HighCVSS 8.8No exploitEPSS 3%eltex · esp-200 firmwareAug 17, 2018
- CVE-2018-1535935Monitor
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version
HighCVSS 8.8No exploitEPSS 2%eltex · esp-200 firmwareAug 17, 2018
- CVE-2018-1535835Monitor
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmwar
HighCVSS 8.8No exploitEPSS 1%eltex · esp-200 firmwareAug 17, 2018
- CVE-2018-1536029Monitor
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0.
HighCVSS 7.3No exploitEPSS 2%eltex · esp-200 firmwareAug 17, 2018
- CVE-2018-1535726Monitor
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.
MediumCVSS 6.5No exploitEPSS 1%eltex · esp-200 firmwareAug 17, 2018