CVE-2018-17873

8.8 highEPSS 1.9%

High (8.8) in wifiranger wifiranger firmware. EPSS 1.9% chance of exploitation in the next 30 days.

An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2018-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wifiranger:wifiranger_firmware

References

http://packetstormsecurity.com/files/149867/WiFiRanger-7.0.8rc3-Incorrect-Access-Control-Privilege-Escalation.html
http://packetstormsecurity.com/files/149867/WiFiRanger-7.0.8rc3-Incorrect-Access-Control-Privilege-Escalation.html

Check your stack JSON