CVE-2018-20162

PoC ×2—

CVSS 3.0

9.9 critical

EPSS

4%p90

Published

Mar 21, 2019 (Mar 21, 2019)

Modified

Jun 17, 2026

Description

Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.

Vendors: digi
Products: transport lr54 firmware
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.