CVE-2018-10716 : An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe,

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WM_CLOSE is not properly considered.

Published 2018-05-03 17:29:00

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2018-10716

2345 Security Guard Project » 2345 Security Guard » Version: 3.7
cpe:2.3:a:2345_security_guard_project:2345_security_guard:3.7:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-10716

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-10716

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2018-10716

https://github.com/rebol0x6c/2345_msg_poc

GitHub - rebol0x6c/2345_msg_poc
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2018-10716

Products affected by CVE-2018-10716

Exploit prediction scoring system (EPSS) score for CVE-2018-10716

CVSS scores for CVE-2018-10716

References for CVE-2018-10716