inteno-exploits

Proof of concepts and exploits for IOPSYS devices This is a collection of scripts which abuse various vulnerabilities on devices running Inteno's IOPSYS. More details about each vulnerability can be found on my blog. These scripts have only been tested on Linux, but they may also work on other...

CVE-2018-14533

CVE-2018-14533 affects Inteno IOPSYS. The issue stems from read_tmp/write_tmp functions that let a local attacker escalate privileges by writing to /tmp/etc/smb.conf because /var is a symlink to /tmp. Public references describe an exploit path; exploitation status is not provided in the documents...