CVE-2018-13109

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 35.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-07-06 · updated 2026-06-17
Weakness: CWE-863

Description

All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.

Affected products

Adbglobal Dv2210 Firmware: all versions
Adbglobal Prg Av4202N Firmware: all versions
Adbglobal Vv2220 Firmware: all versions
Adbglobal Vv5522 Firmware: all versions

References

http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html
http://seclists.org/fulldisclosure/2018/Jul/18
http://www.securityfocus.com/archive/1/542119/100/0/threaded
https://www.exploit-db.com/exploits/44982/
https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/
http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html
http://seclists.org/fulldisclosure/2018/Jul/18
http://www.securityfocus.com/archive/1/542119/100/0/threaded
https://www.exploit-db.com/exploits/44982/
https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/

Get alerted when CVE-2018-13109 or the next vulnerability affects your stack