CVE-2018-15534Re Porter 16 Firmware Information Disclosure
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003.
Published Aug 21, 2018 · Updated Nov 21, 2024
Key Facts
Patch immediately- CVE-2018-15534 is a critical-severity vulnerability (CVSS 9.8 v3) affecting Re Porter 16 Firmware (Geutebrueck).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 32% probability of exploitation in the next 30 days.
- Fixed versions are available, including Re Porter 16 Firmware 7.8.974.20.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
32%
Higher than 98.3% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
45/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
3
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Description
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003.
Affected Products
1 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Re Porter 16 FirmwareGeutebrueck | See advisory | 7.8.974.20 |
Patched Releases
Re Porter 16 Firmware
7.8.974.20
Timeline
Publicly disclosed
Aug 21, 2018
Last updated
Nov 21, 2024
Weakness Type
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
FAQ
Common Questions.
Geutebrueck re_porter 16 before 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003.
Affected: Re Porter 16 Firmware (Geutebrueck). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Re Porter 16 Firmware 7.8.974.20.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2018-15534 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo