Critical severity9.9NVD Advisory· Published Dec 17, 2018· Updated Jun 17, 2026
CVE-2018-18556
CVE-2018-18556
Description
A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated (sudo) permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions and leverage its improper input validation condition to spawn an attacker-controlled shell with root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/159234/VyOS-restricted-shell-Escape-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- blog.mirch.io/2018/11/05/cve-2018-18556-vyos-privilege-escalation-via-sudo-pppd-for-operator-users/nvdExploitThird Party Advisory
- blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releasesnvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.