返回 CVE 瀏覽器

CVE-2016-7089

HIGH

7.8

CVSS Severity Score

EPSS Score0.1380%

EPSS Percentile11.70th

Published2016年8月24日

Last Modified2026年5月6日

Vulnerability Description

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.

Affected Platforms (CPE)

📦

Watchguard

Rapidstream

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html

🔗 http://www.securityfocus.com/bid/92638

🔗 https://www.exploit-db.com/exploits/40270/

🔗 https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/

🔗 http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html

🔗 http://www.securityfocus.com/bid/92638

🔗 https://www.exploit-db.com/exploits/40270/

🔗 https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/

相關漏洞威脅

CVE-2000-078410.0

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remot...

CVE-2016-045110.0

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affec...

CVE-2016-045210.0

Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affec...

CVE-2016-048310.0

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attack...