CVE-2018-18556

EPSS 15.4%

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 15.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

05 nov 2018Exploit Metasploit disponible

17 dic 2018Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo) permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions and leverage its improper input validation condition to spawn an attacker-controlled shell with root privileges.

Productos afectados

n/a · n/a

Referencias

http://packetstormsecurity.com/files/159234/VyOS-restricted-shell-Escape-Privilege-Escalation.html https://blog.mirch.io/2018/11/05/cve-2018-18556-vyos-privilege-escalation-via-sudo-pppd-for-operator-users/https://blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releases