Vulnerability Details : CVE-2018-8044
K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K7Sentry.sys.
Exploit prediction scoring system (EPSS) score for CVE-2018-8044
Probability of exploitation activity in the next 30 days: 0.05%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 13 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2018-8044
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2018-8044
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by: nvd@nist.gov (Primary)
-
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-8044
-
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
Advisory issued on 6th January, 2021 - Help Desk Software by Vision HelpdeskVendor Advisory
-
http://k7computing.com
Best Antivirus Software For Cyber Security | K7 AntivirusProduct
-
http://k7antivirus.com
k7antivirus.com - This website is for sale! - k7antivirus Resources and Information.Product
Products affected by CVE-2018-8044
- cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*
- cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*
- cpe:2.3:a:k7computing:antivrius:*:*:*:*:premium:*:*:*
- cpe:2.3:a:k7computing:enterprise_security:*:*:*:*:*:*:*:*