CVE-2018-14083: Infoleak
Published Jul 25, 2018
·Updated
LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash.
Affected Software
2 affected components
LICA Minicmts E8k Firmware
LICA miniCMTS E8K
Event History
Jul 25, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-14083?
CVE-2018-14083 is considered a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2018-14083?
To fix CVE-2018-14083, update the Lica miniCMTS E8K firmware to the latest version that addresses this vulnerability.
3
What type of attacks can exploit CVE-2018-14083?
CVE-2018-14083 can be exploited through remote attacks that use crafted POST requests to access sensitive files.
4
What sensitive information is exposed by CVE-2018-14083?
CVE-2018-14083 allows attackers to obtain the password hash from the inc/user.ini file.
5
Are all versions of Lica miniCMTS E8K vulnerable to CVE-2018-14083?
Not all versions are vulnerable; only certain firmware versions of Lica miniCMTS E8K are affected by CVE-2018-14083.