PT-2018-14760 · Cscape · Cscape

Mdm

+1

·

Publicado

2018-12-20

·

Atualizado

2019-10-09

·

CVE-2018-19005

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cscape versions 9.80.75.3 SP3 and prior
Description An improper input validation issue has been identified, which can be exploited by processing specially crafted files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code. The issue is related to the parsing of CSP files and can lead to various types of attacks, including remote code execution and information disclosure.
Recommendations For versions 9.80.75.3 SP3 and prior, update to a version that includes the fix for the improper input validation vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-19005
ZDI-18-1434
ZDI-18-1435
ZDI-18-1436
ZDI-18-1437
ZDI-18-1438
ZDI-18-1439
ZDI-18-1440
ZDI-18-1441
ZDI-18-1442
ZDI-18-1443
ZDI-18-1444

Produtos afetados

Cscape