Vendors / Eltex Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Eltex records in CISA KEV No Eltex vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02485 · Published 2018-08-17 · No fix listed CWE-77
Priority MEDIUM 41
An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01596 · Published 2018-08-17 · No fix listed
Priority MEDIUM 41
An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01331 · Published 2018-08-17 · No fix listed CWE-20
Priority LOW 35
An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0.
CVSS 3.0 HIGH 7.3· Network · No auth · No interaction · EPSS 0.01602 · Published 2018-08-17 · No fix listed CWE-798
Priority LOW 31
An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01104 · Published 2018-08-17 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 4 1 0 0
THREATIST.IORead the docs