What’s Vulnerable › Vulnerabilities

CVE-2018-14826

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-02 · updated 2026-06-17
• Weakness: CWE-287

Description

Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted URL. This could allow for remote code execution.

Affected products

• Entes Emg-12 Firmware: through 2.57

References

• http://www.securityfocus.com/bid/105489
• https://ics-cert.us-cert.gov/advisories/ICSA-18-275-03
• http://www.securityfocus.com/bid/105489
• https://ics-cert.us-cert.gov/advisories/ICSA-18-275-03

Get alerted when CVE-2018-14826 or the next vulnerability affects your stack