CVE-2018-20487
HIGHInteno IOPSYS 1.0-3.16 - Remote Code Execution via Firewall Include Path Injection
Title source: llmDescription
An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://neonsea.uk/blog/2018/12/26/firewall-includes.html
Various Sources x_refsource_confirm
http://public.inteno.se/?p=feed-inteno-openwrt.git%3Ba=commit%3Bh=e6159ca928d7f0c143be213afc6bf810c0329fe2
Scores
CVSS v3
8.8
EPSS
0.0191
EPSS Percentile
77.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (1)
inteno/iopsys
1.0 - 3.16
Published
Apr 11, 2019
Tracked Since
Feb 18, 2026