CVE-2018-15360 - An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0

HIGH

An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0

Published Aug 17, 2018

7.3

HIGH

CVSS 3.0

EPSS 1.60%

An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Kaspersky Lab	Eltex ESP-200	unknown	Affected 1.2.0

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7238		Advisory
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-016-eltex-esp-200-router-default-password-usage/		x_refsource_MISCMitigationThird Party AdvisoryUS Government ResourceVDB Entry

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Kaspersky

Published Aug 17, 2018

Updated Aug 5, 2024

Reserved Aug 15, 2018

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Kaspersky

Published Aug 17, 2018

Updated Aug 5, 2024

GitHub

No data