PatchTheCVEeltex vulnerabilities
Recent CVEs affecting eltex products. 5 tracked.
eltex has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-17. Highest priority: CVE-2018-15356 (score 52/100).
- CVE-2018-15360 HIGH 7.3 MITIGATE An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 fi
- CVE-2018-15359 HIGH 8.8 MITIGATE An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in
- CVE-2018-15358 HIGH 8.8 MITIGATE An authenticated attacker with low privileges can activate high privileged user and use it to expand attack su
- CVE-2018-15357 MEDIUM 6.5 MITIGATE An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP
- CVE-2018-15356 HIGH 8.8 MITIGATE An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version
FAQ
How do I fix eltex vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eltex being exploited right now?
None of the tracked eltex CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eltex CVE should I patch first?
CVE-2018-15356 currently ranks highest (52/100): An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version .