VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 11, 2019· Updated Jun 17, 2026

CVE-2018-20487

CVE-2018-20487

Description

An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add a firewall rule as an "include" and point the "path" argument to a malicious script or binary. This gets executed as root when the firewall changes are committed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Inteno/iopsys2 versions
    cpe:2.3:a:inteno:iopsys:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:inteno:iopsys:*:*:*:*:*:*:*:*range: >=1.0,<=3.16
    • (no CPE)range: 1.0 - 3.16
  • Inteno/firewall3llm-create
    Range: 1.0 - 3.16

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.