Vulnerability Details CVE-2018-13140
Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.092
EPSS Ranking 92.5%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
References
- http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/Sep/38
- https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/
- http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/Sep/38
- https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/
Products affected by CVE-2018-13140
-
cpe:2.3:a:druide:antidote_9:*
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-