cvedb.io
CVE-2018-15481
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2018-08-21T16:29:00.213 · Last modified 2026-06-17T01:42:36.147

Summary

Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices using firmware version 5.1.x before 5.1.13 allows authenticated remote attackers to escape the shell and escalate their privileges by adding a LocalCommand to the SSH configuration file in the user home folder.

Affected products

ucopia — wireless_appliance_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when ucopia ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.