Unscored CVE-2018-15357 EUVD-2018-7235GHSA-687f-mfxq-m4c2

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.

Published Aug 17, 2018 · Updated Aug 5, 2024 · Assigned by Kaspersky

Vendor: Kaspersky Lab Product: Eltex ESP-200

Description

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.

Affected products

Vendor	Product	Affected	Fixed
Kaspersky Lab	Eltex ESP-200	1.2.0	—

References

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-013-eltex-esp-200-router-information-disclosure/