CVE-2018-15481

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in...

CVE-2018-15481

CVE-2018-15481 affects UCOPIA Wireless Appliance devices running firmware 5.1.x before 5.1.13. The vulnerability is due to improper input sanitization in the restricted administration shell, enabling authenticated remote attackers to escape the shell and escalate privileges by adding a LocalComma...

CVE-2018-15481

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in...

CVE-2018-15481: Improper Neutralization of Special Elements used in an OS Command

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in...

PT-2018-13047

Name of the Vulnerable Software and Affected Versions UCOPIA Wireless Appliance firmware versions 5.1.x before 5.1.13 Description The issue is related to improper input sanitization within the restricted administration shell. This allows authenticated remote attackers to escalate their privileges...

UCOPIA Wireless Appliance Privilege Mobilization Vulnerability (CNVD-2018-11049)

The UCOPIA Wireless Appliance is a wireless device from the French company UCOPIA. A security vulnerability exists in the restricted shell interface of the UCOPIA Wireless Appliance in versions prior to 5.1.8. A remote attacker can exploit the vulnerability to gain 'admin' privileges via shell...

UCOPIA Wireless Appliance Elevation of Privilege Vulnerability

The UCOPIA Wireless Appliance is a wireless device from the French company UCOPIA. A security vulnerability exists in the chrootholeclient executable file in the UCOPIA Wireless Appliance versions prior to 5.1.8. A remote attacker can exploit this vulnerability by sending parameters with the '$'...

UCOPIA Wireless Appliance Elevation of Privilege Vulnerability

The UCOPIA Wireless Appliance is a wireless device from the French company UCOPIA. A security vulnerability exists in the restricted administration shell in the UCOPIA Wireless Appliance versions prior to 4.4.20, 5.0.x versions prior to 5.0.19, and 5.1.x versions prior to 5.1.11, which stems from...

Input validation

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

CVE-2017-17743

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

CVE-2017-17743

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

CVE-2017-17743

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

CVE-2017-17743

CVE-2017-17743 affects UCOPIA Wireless Appliance: restricted administration shell allows an authenticated attacker to escalate privileges by uploading a .bashrc that contains /bin/sh, effectively escaping the shell. Affected versions are before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11...

CVE-2017-17743: Improper Authentication

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.20, 5.0.x before 5.0.19, and 5.1.x before 5.1.11 allows authenticated remote attackers to escape the shell and escalate their privileges by uploading a .bashrc file containing th...

PT-2018-6561

Name of the Vulnerable Software and Affected Versions: UCOPIA Wireless Appliance devices versions prior to 4.4.20 UCOPIA Wireless Appliance devices versions 5.0.x prior to 5.0.19 UCOPIA Wireless Appliance devices versions 5.1.x prior to 5.1.11 Description: The issue is related to improper input...

UCOPIA Wireless Appliance 5.1 Code Execution

Exploit Title: Unauthenticated remote root code execution on captive portal Ucopia '/var/www/html/upload/bd.php;echo%20t As php is in sudoers without password... https://controller.access.network/upload/bd.php?0=sudo%20/usr/bin/php%20-r%20%27system"id";%27 Just push your ssh key and get nice root...

CVE-2017-11322

The chrootholeclient executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign $ metacharacter in the argument to chrootholeclient...

CVE-2017-11322

The chrootholeclient executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign $ metacharacter in the argument to chrootholeclient...

Code injection

The chrootholeclient executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign $ metacharacter in the argument to chrootholeclient...

Command injection

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command...