CVE-2016-7089

Loading...

General

Score:7.2/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Complete
Integrity:Complete
Availability:Complete

Exploitability Metrics

Access Vector:Local
Access Complexity:Low
Authentication:None

Published on 24/08/16 - Updated on 28/11/16

Description

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2016-7089

Exploits

Exploit-DBEDB-40270

Relative technologies

VendorProduct
watchguardrapidstream

Share this vulnerability with:

Twitter Facebook LinkedIn Mail