CVE-2018-15356

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.

• CWE-77

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-012-eltex-esp-200-router-command-injection/Mitigation, Third Party Advisory, US Government Resource, VDB Entry
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-012-eltex-esp-200-router-command-injection/Mitigation, Third Party Advisory, US Government Resource, VDB Entry

Published

Aug 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15350Router Default Credentials in Kraftway 24F2XG Router firmwar…
• CVE-2018-15351Denial of service via crafting malicious link and sending it…
• CVE-2018-15352An attacker with low privileges can cause denial of service …
• CVE-2018-15353A Buffer Overflow exploited through web interface by remote …
• CVE-2018-15354A Buffer Overflow exploited through web interface by remote …
• CVE-2018-15355Usage of SSLv2 and SSLv3 leads to transmitted data decryptio…
• CVE-2018-15357An authenticated attacker with low privileges can extract pa…
• CVE-2018-15358An authenticated attacker with low privileges can activate h…
• CVE-2018-15359An authenticated attacker with low privileges can use insecu…
• CVE-2018-1536IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6…5.4
• CVE-2018-15360An attacker without authentication can login with default cr…
• CVE-2018-15361UltraVNC revision 1198 has a buffer underflow vulnerability …