CVE-2018-20052

The CVE-2018-20052 entry concerns Cerner Connectivity Engine (CCE) 4 devices where the user running the main CCE firmware has NOPASSWD sudo privileges to several utilities, enabling potential root privilege escalation. A concrete example is the command: sudo ln -s /tmp/script /etc/cron.hourly/scr...

CVE-2018-20053

CVE-2018-20053 affects Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone, and NTP server configurations on the CCE are vulnerable to command injection when a crafted configuration file is sent over the network. The available documents do not specify affected versions beyond “CCE ...