CVE-2018-17933 Privilege escalation in VGo Robot
Authenticated users can execute administrative commands on VGo Robots, leading to privilege escalation and potential system compromise.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-17933?
CVE-2018-17933 is a high-severity vulnerability in VGo Robot, published on 30 Oct 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.
Weakness: CWE-285
Which versions are affected by CVE-2018-17933?
It affects 1 product.
Products include Vecna Vgo Firmware.
How do I fix CVE-2018-17933?
No fix has been published for CVE-2018-17933 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-17933 being exploited?
There is no known exploitation of CVE-2018-17933 in the wild and no public exploit code.
Other vulnerabilities in VGo Robot
Sources
Also known as GHSA-fgpm-wqwm-x2mm.