CVE-2018-18367
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
Symantec Endpoint Protection Manager (SEPM), en versiones anteriores e incluyendo a 12.1 RU6 MP9 y anteriores a 14.2 RU1, puede ser susceptible a una vulnerabilidad de precarga de DLL, que es un tipo de problema que puede ocurrir cuando una aplicación busca llamar a una DLL para su ejecución y un atacante proporciona una DLL maliciosa para usar en su lugar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-10-15 CVE Reserved
- 2019-04-25 CVE Published
- 2024-08-05 CVE Updated
- 2024-09-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-426: Untrusted Search Path
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/107996 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.symantec.com/en_US/article.SYMSA1479.html | 2019-05-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | rtm |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru1-mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru2-mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru4-mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru4-mp1a |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru4-mp1b |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru4a |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp1a |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp3 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp6 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp7 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp8 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 12.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "12.1" | ru6-mp9 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14" | mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14" | mp2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.0.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.0.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.0.1" | mp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.0.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.0.1" | mp2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.1 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.2 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Manager Search vendor "Symantec" for product "Endpoint Protection Manager" | 14.2 Search vendor "Symantec" for product "Endpoint Protection Manager" and version "14.2" | mp1 |
Affected
| ||||||