CVE-2018-17873

PoC —

CVSS 3.0

8.8 high

EPSS

2%p78

Published

Oct 23, 2018 (Oct 23, 2018)

Modified

Jun 17, 2026

Description

An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account.

Vendors: wifiranger
Products: wifiranger firmware
Weakness: CWE-732
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.