CVE-2018-13109

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.

• CWE-863

• http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/542119/100/0/threadedThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44982/Third Party Advisory, VDB Entry
• https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/18Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/542119/100/0/threadedThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44982/Third Party Advisory, VDB Entry
• https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/Exploit, Third Party Advisory

Published

Jul 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13101KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suf…
• CVE-2018-13102AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a D…
• CVE-2018-13103OX App Suite 7.8.4 and earlier allows SSRF.
• CVE-2018-13104OX App Suite 7.8.4 and earlier allows XSS. Internal referenc…
• CVE-2018-13106ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configurat…
• CVE-2018-13108All ADB broadband gateways / routers based on the Epicentro …
• CVE-2018-1311The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use…8.1
• CVE-2018-13110All ADB broadband gateways / routers based on the Epicentro …
• CVE-2018-13111There exists a partial Denial of Service vulnerability in Wa…
• CVE-2018-13112get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows re…
• CVE-2018-13113The transfer and transferFrom functions of a smart contract …7.5
• CVE-2018-13114Missing authentication and improper input validation in KERU…