CVE-2018-14822 Information disclosure in EMG12
An attacker can exploit information exposure in the web interface to impersonate users and execute arbitrary code on Entes EMG12 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-14822?
CVE-2018-14822 is a critical vulnerability in Entes EMG12, published on 2 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary code.
Which versions are affected by CVE-2018-14822?
It affects 1 product.
Products include Entes Emg-12 Firmware.
How do I fix CVE-2018-14822?
No fix has been published for CVE-2018-14822 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-14822 being exploited?
There is no known exploitation of CVE-2018-14822 in the wild and no public exploit code.
Other vulnerabilities in Entes EMG12
Sources
Also known as GHSA-r458-wh63-9q54.