CVE-2018-13012

Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch,…

mitre·CWE-494·Published 2018-06-29

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

303 chars

Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.12 allows the remote attacker to execute unauthorized code by substituting a forged update server.

NVDen

303 chars

NVDes

355 chars

La descarga de código con comprobación de integridad incorrecta en snsupd.exe y upd.exe en SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure y SoftControl/SafenSoft Enterprise Suite en versiones anteriores a la 4.4.12 permite al atacante remoto ejecutar código no autorizado sustituyendo un servidor de actualizaciones falsificado.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	8.1	2.2	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H