CVE-2018-0670 INplc-RT 3.08 and earlier allows remote attackers to bypass authentication to execute an arbitrary command through the protocol-compliant traffic. This is a different vulnerability than CVE-2018-0669.
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
INplc-RT 3.08 and earlier allows remote attackers to bypass authentication to execute an arbitrary command through the protocol-compliant traffic. This is a different vulnerability than CVE-2018-0669.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mnc inplc-rt | <= 3.08 | No fix listed |
| micronet INplc-RT | = 3.08 and earlier | No fix listed |
References
- www.mnc.co.jp vendor-advisory
- JVN#59624986 third-party-advisory