CVEvulnerability
CVE-2018-12259
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-732
Description
An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system compromise.
Affected configurations
• apollotechnologiesinc momentum axel 720p firmware 5.1.8
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf Exploit, Third Party Advisory
- https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf Exploit, Third Party Advisory