CVE-2018-13801

A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. Successful exploitation requires user privileges of a low-privileged user but no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system.

• CWE-264
• CWE-269

• http://www.securityfocus.com/bid/105545Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-493830.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/105545Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-493830.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-282-03Third Party Advisory, US Government Resource

Published

Oct 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13796An issue was discovered in GNU Mailman before 2.1.28. A craf…
• CVE-2018-13797The macaddress module before 0.2.9 for Node.js is prone to a…
• CVE-2018-13798A vulnerability has been identified in SICAM A8000 CP-8000 (…
• CVE-2018-13799A vulnerability has been identified in SIMATIC WinCC OA V3.1…
• CVE-2018-1380IBM InfoSphere Master Data Management Collaboration Server 1…2.7
• CVE-2018-13800A vulnerability has been identified in SIMATIC S7-1200 CPU f…
• CVE-2018-13802A vulnerability has been identified in ROX II (All versions …
• CVE-2018-13803Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-13804A vulnerability has been identified in SIMATIC IT LMS (All v…
• CVE-2018-13805A vulnerability has been identified in SIMATIC ET 200SP Open…
• CVE-2018-13806A vulnerability has been identified in SIEMENS TD Keypad Des…
• CVE-2018-13807A vulnerability has been identified in SCALANCE X300 (All ve…