CVE-2018-11008
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53.
Se detectó un problema de Control de Acceso incorrecto en K7Computing K7AntiVirus Premium versión 15.01.00.53
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-05-11 CVE Reserved
- 2021-01-11 CVE Published
- 2023-09-27 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-269: Improper Privilege Management
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021 | 2021-01-12 | |
| https://www.k7computing.com | 2021-01-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| K7computing Search vendor "K7computing" | Antivrius Search vendor "K7computing" for product "Antivrius" | < 16.0.0001 Search vendor "K7computing" for product "Antivrius" and version " < 16.0.0001" | premium |
Affected
| ||||||
| K7computing Search vendor "K7computing" | Enterprise Security Search vendor "K7computing" for product "Enterprise Security" | < 14.2.0001 Search vendor "K7computing" for product "Enterprise Security" and version " < 14.2.0001" | - |
Affected
| ||||||
| K7computing Search vendor "K7computing" | Total Security Search vendor "K7computing" for product "Total Security" | < 16.0.0001 Search vendor "K7computing" for product "Total Security" and version " < 16.0.0001" | - |
Affected
| ||||||
| K7computing Search vendor "K7computing" | Ultimate Security Search vendor "K7computing" for product "Ultimate Security" | < 16.0.0001 Search vendor "K7computing" for product "Ultimate Security" and version " < 16.0.0001" | - |
Affected
| ||||||