ADB broadband gateways - Information Disclosure (CVE-2018-13109)
Description
All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.
psychologyCrowdSec Analysis
CVE-2018-13109 is an authorization bypass vulnerability affecting all ADB broadband gateways and routers based on the Epicentro platform. This flaw allows attackers to access and modify restricted settings in the web interface, such as enabling the TELNET server, potentially leading to unauthorized configuration changes and increased risk of further exploitation.
CrowdSec has been tracking this vulnerability and its exploits since 10th of September 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2018-13109 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit this vulnerability by inserting a double slash (//) before restricted entries in URLs under /ui/dboard/settings/management/, such as /ui/dboard/settings/management//telnetserver, to bypass authorization controls and gain unauthorized access to sensitive configuration settings.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2018-07-06 |
| Rule Released | 2025-09-10 |
Remediation & Protection
External References
- http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html
- http://seclists.org/fulldisclosure/2018/Jul/18
- https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/
- https://gitlab.com/exploit-database/exploitdb/blob/main/exploits/hardware/webapps/44982.txt