CVE-2018-8414

Опубликовано: 15 авг. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Высокий

Описание

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

Ссылки

http://www.securityfocus.com/bid/105016
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041458
Broken Link
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105016
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041458
Broken Link
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8414
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8414
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_server_1709:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*

EPSS

Процентиль: 99%

0.87937

Высокий

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2018-8414

CVSS3: 4.8

msrc

около 7 лет назад

Windows Shell Remote Code Execution Vulnerability

GHSA-xg99-mpwj-gf2c

CVSS3: 8.8

github

больше 3 лет назад

BDU:2018-01055

CVSS3: 7.8

fstec