Privilege escalation

2022-11-1022:15:00

PRIOn knowledge base

www.prio-n.com

etic telecom

ras

web portal

vulnerability

privilege escalation

firmware packages

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

JSON

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to accepting malicious firmware packages that could provide a backdoor to an attacker and provide privilege escalation to the device.

CPENameOperatorVersion
remote_access_server_firmwarele4.5.0

CPE	Name	Operator	Version
	remote_access_server_firmware	le	4.5.0

References

www.cisa.gov/uscert/ics/advisories/icsa-22-307-01