CVE-2018-18556

EPSS 15.4%

Vexday Risk Score

23Baixo

Decisão SSVC (CISA)

Attend

PoC disponível → acompanhar de perto

Maturidade do exploit

Exploit funcional

Exploit automatizável disponível (Nuclei/Metasploit).

CVSS —EPSS 15.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

05 nov 2018Exploit Metasploit disponível

17 dez 2018Publicada no NVD

Recomendação: Planejar correção próxima — já existe PoC pública.

A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo) permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions and leverage its improper input validation condition to spawn an attacker-controlled shell with root privileges.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/159234/VyOS-restricted-shell-Escape-Privilege-Escalation.html https://blog.mirch.io/2018/11/05/cve-2018-18556-vyos-privilege-escalation-via-sudo-pppd-for-operator-users/https://blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releases