PatchTheCVEesp-200 firmware vulnerabilities and fixes
Recent CVEs affecting esp-200 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: esp 200 firmware, esp-200firmware.
esp-200 firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-17. Highest priority: CVE-2018-15356 (score 52/100).
- CVE-2018-15360 HIGH 7.3 MITIGATE An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 fi
- CVE-2018-15359 HIGH 8.8 MITIGATE An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in
- CVE-2018-15358 HIGH 8.8 MITIGATE An authenticated attacker with low privileges can activate high privileged user and use it to expand attack su
- CVE-2018-15357 MEDIUM 6.5 MITIGATE An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP
- CVE-2018-15356 HIGH 8.8 MITIGATE An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version
FAQ
How do I fix esp-200 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is esp-200 firmware being exploited right now?
None of the tracked esp-200 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which esp-200 firmware CVE should I patch first?
CVE-2018-15356 currently ranks highest (52/100): An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version .