PT-2018-9749 · Ncomputing · Ncomputing Vspace Pro

Javier Bernardo · Published 2018-04-20 · Updated 2018-05-16 · CVE-2018-10201

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NComputing vSpace Pro versions 10 through 11

Description: A security issue in NcMonitorServer.exe allows reading arbitrary files outside the web server's root directory. This can be exploited remotely via a crafted URL to TCP port 8667, using directory-traversal patterns such as ../ or ... The issue can be exploited without credentials.

Recommendations: For NComputing vSpace Pro versions 10 through 11, consider restricting access to TCP port 8667 until a fix is available. As a temporary workaround, limit the use of the NcMonitorServer.exe service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-10201

Affected Products

Ncomputing Vspace Pro

References · 6

• 🔥 https://exploit-db.com/exploits/44497 · Exploit
• 🔥 http://kwell.net/kwell_blog/?p=5199 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10201 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10201 · Vendor Advisory
• https://kwell.net/kwell/index.php?option=com_newsfeeds&view=newsfeed&id=15&Itemid=173&lang=es · Note
• https://support.ncomputing.com/portal/kb/articles/ncomputing-health-monitor-server-vulnerability-patch · Note