CVE-2018-18556

creationtimestamp| type| source ---|---|--- 2020-09-19 13:26:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vyosrestrictedshellprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00|...

CVE-2018-18556

CVE-2018-18556 affects VyOS 1.1.8. It is a privilege-escalation flaw where an operator user can run the pppd binary with elevated (sudo) permissions due to an insecure default configuration, combined with improper validation of certain input parameters. An attacker with operator privileges can le...