Vulnerability Details CVE-2018-13140
Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.051
EPSS Ranking 89.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
References
- http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/Sep/38
- https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/
- http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/Sep/38
- https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/
Products affected by CVE-2018-13140
-
cpe:2.3:a:druide:antidote_9:*
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-