CVE-2018-20162

Name of the Vulnerable Software and Affected Versions: Digi TransPort LR54 version 4.4.0.26 and possible earlier versions

Description: The issue is related to Improper Input Validation, allowing users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.

Recommendations: For version 4.4.0.26 and possible earlier versions, restrict super CLI access privileges to prevent bypassing of the restricted shell until a fix is available. Consider limiting the execution of arbitrary commands as root to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.