CVE-2018-14533

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.

• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.htmlExploit
• https://www.exploit-db.com/exploits/45089/Exploit, Third Party Advisory, VDB Entry
• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.htmlExploit
• https://www.exploit-db.com/exploits/45089/Exploit, Third Party Advisory, VDB Entry

Published

Jul 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14527Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS pr…
• CVE-2018-14528Invoxia NVX220 devices allow TELNET access as admin with a d…
• CVE-2018-14529Invoxia NVX220 devices allow access to /bin/sh via escape fr…
• CVE-2018-1453IBM Security Identity Manager Virtual Appliance 7.0 allows a…8.8
• CVE-2018-14531An issue was discovered in Bento4 1.5.1-624. There is an uns…
• CVE-2018-14532An issue was discovered in Bento4 1.5.1-624. There is a heap…
• CVE-2018-1454IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could…5.9
• CVE-2018-14541PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and St…
• CVE-2018-14543There exists one NULL pointer dereference vulnerability in A…
• CVE-2018-14544There exists one invalid memory read bug in AP4_SampleDescri…
• CVE-2018-14545There exists one invalid memory read bug in AP4_SampleDescri…
• CVE-2018-14549An issue has been found in libwav through 2017-04-20. It is …