CVE-2018-10286

8.8 highEPSS 6.3%

High (8.8) in ericssonlg ipecs nms. EPSS 6.3% chance of exploitation in the next 30 days.

The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2018-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ericssonlg:ipecs_nms

References

https://gist.github.com/berkgoksel/fde102503c457c0344e2e53b7971437a
https://www.exploit-db.com/exploits/44515/
https://gist.github.com/berkgoksel/fde102503c457c0344e2e53b7971437a
https://www.exploit-db.com/exploits/44515/

Check your stack JSON