What’s Vulnerable › Vulnerabilities

CVE-2018-14533

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-07-31 · updated 2026-06-17

Description

read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.

Affected products

• Intenogroup Iopsys Firmware: all versions

References

• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
• https://www.exploit-db.com/exploits/45089/
• https://neonsea.uk/blog/2018/07/21/tmp-to-rce.html
• https://www.exploit-db.com/exploits/45089/

Get alerted when CVE-2018-14533 or the next vulnerability affects your stack