CVE-2018-19648

https://notcve.org/view.php?id=CVE-2018-19648

27 Mar 2019 — An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF. Se ha descubierto un problema en ADTRAN PMAA 1.6.2-1, 1.6.3 y 1.6.4. NETCONF Access Management (NACM) permite que los usuarios sin privilegios creen usuarios privilegiados y ejecuten comandos arbitrarios mediante el uso de diagnostic-profile mediante RESTCONF. • https://supportforums.adtran.com/docs/DOC-9344 • CWE-269: Improper Privilege Management •