CVE-2018-13108

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP.

• http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/17Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/542117/100/0/threaded
• https://www.exploit-db.com/exploits/44983/Third Party Advisory, VDB Entry
• https://www.sec-consult.com/en/blog/advisories/local-root-jailbreak-via-network-file-sharing-flaw-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/17Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/542117/100/0/threaded
• https://www.exploit-db.com/exploits/44983/Third Party Advisory, VDB Entry
• https://www.sec-consult.com/en/blog/advisories/local-root-jailbreak-via-network-file-sharing-flaw-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory

Published

Jul 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13100An issue was discovered in fs/f2fs/super.c in the Linux kern…
• CVE-2018-13101KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suf…
• CVE-2018-13102AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a D…
• CVE-2018-13103OX App Suite 7.8.4 and earlier allows SSRF.
• CVE-2018-13104OX App Suite 7.8.4 and earlier allows XSS. Internal referenc…
• CVE-2018-13106ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configurat…
• CVE-2018-13109All ADB broadband gateways / routers based on the Epicentro …
• CVE-2018-1311The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use…8.1
• CVE-2018-13110All ADB broadband gateways / routers based on the Epicentro …
• CVE-2018-13111There exists a partial Denial of Service vulnerability in Wa…
• CVE-2018-13112get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows re…
• CVE-2018-13113The transfer and transferFrom functions of a smart contract …7.5