CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Privilege Management
Summary: a vulnerability has been identified in rox ii (all versions < v2.12.1). an attacker with network access to port 22/tcp and valid low-privileged user credentials for the target device could perform a privilege escalation and gain root privileges. successful exploitation requires user privileges of a low-privileged user but no user interaction. the vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-10-10
Last Modified Date: 2019-10-09