CVEブラウザに戻る

CVE-2016-7089

HIGH

7.8

CVSS Severity Score

EPSS Score0.1380%

EPSS Percentile11.70th

Published2016年8月24日

Last Modified2026年5月6日

Vulnerability Description

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.

Affected Platforms (CPE)

📦

Watchguard

Rapidstream

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html

🔗 http://www.securityfocus.com/bid/92638

🔗 https://www.exploit-db.com/exploits/40270/

🔗 https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/

🔗 http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html

🔗 http://www.securityfocus.com/bid/92638

🔗 https://www.exploit-db.com/exploits/40270/

🔗 https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/

関連する脆弱性情報

CVE-2000-078410.0

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remot...

CVE-2016-134310.0

The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service ...

CVE-2016-103810.0

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader...

CVE-2016-104110.0

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader...