CWE Code: 269
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Privilege Management
Summary: an issue was discovered in adtran pmaa 1.6.2-1, 1.6.3, and 1.6.4. netconf access management (nacm) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over restconf.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-03-27
Last Modified Date: 2019-10-03