CVE-2018-15138
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ericsson-LG iPECS NMS 30M是韩国Ericsson-LG公司的一套网络管理解决方案。 Ericsson-LG iPECS NMS 30M中存在目录遍历漏洞。攻击者可借助ipecs-cm/download?filename=../ URIs利用该漏洞获取敏感信息（配置文件）。
Public Exploits 1
Nuclei · 1
CVE-2018-15138.yaml [template]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-15138
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ericsson-LG iPECS NMS 30M 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ericsson-LG iPECS NMS 30M是韩国Ericsson-LG公司的一套网络管理解决方案。 Ericsson-LG iPECS NMS 30M中存在目录遍历漏洞。攻击者可借助ipecs-cm/download?filename=../ URIs利用该漏洞获取敏感信息（配置文件）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2018-15138
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15138.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-15138
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2018-15138 (1)
Same Patch Batch · n/a · 2018-08-15 · 24 CVEs total
| CVE-2018-15154 | OpenEMR 安全漏洞 | |
| CVE-2018-9129 | ZyXEL ZyWALL/USG系列设备安全漏洞 | |
| CVE-2018-8753 | Clavister cOS Core 安全漏洞 | |
| CVE-2018-14780 | Yubico-Piv 缓冲区错误漏洞 | |
| CVE-2018-14779 | Yubico-Piv 缓冲区错误漏洞 | |
| CVE-2018-14722 | Btrfsmaintenance 安全漏洞 | |
| CVE-2018-14007 | Citrix XenServer 路径遍历漏洞 | |
| CVE-2018-11247 | Nasdaq BWise 安全漏洞 | |
| CVE-2018-8353 | Microsoft Internet Explorer 资源管理错误漏洞 | |
| CVE-2018-15172 | TP-Link WR840N 缓冲区错误漏洞 | |
| CVE-2018-15156 | OpenEMR 安全漏洞 | |
| CVE-2018-15155 | OpenEMR 安全漏洞 | |
| CVE-2018-10369 | Intelbras Win 240 跨站脚本漏洞 | |
| CVE-2018-15153 | OpenEMR 安全漏洞 | |
| CVE-2018-15152 | OpenEMR 授权问题漏洞 | |
| CVE-2018-15151 | OpenEMR SQL注入漏洞 | |
| CVE-2018-15150 | OpenEMR SQL注入漏洞 | |
| CVE-2018-15149 | OpenEMR SQL注入漏洞 | |
| CVE-2018-15148 | OpenEMR SQL注入漏洞 | |
| CVE-2018-15147 | OpenEMR SQL注入漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-15138
No comments yet