Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-18552

Опубликовано: 24 окт. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 5
EPSS Низкий

Описание

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug (via the sensor_details.html id parameter) that allows creating empty files in arbitrary directories.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:serverscheck:monitoring_software:*:*:*:*:*:*:*:*
Версия до 14.3.3 (включая)

EPSS

Процентиль: 84%
0.02202
Низкий

6.5 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug (via the sensor_details.html id parameter) that allows creating empty files in arbitrary directories.

EPSS

Процентиль: 84%
0.02202
Низкий

6.5 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22