CVE-2018-8546 : A denial of service vulnerability exists in Skype for Business, aka "Microsoft S

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.

Published 2018-11-14 01:29:01

Updated 2020-08-24 17:37:01

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-8546

Microsoft » Office » Version: 2019
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
Matching versions
Microsoft » Lync » Version: 2013 Update SP1
cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Lync Basic » Version: 2013 Update SP1
cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Skype For Business » Version: 2016
cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
Matching versions
Microsoft » Office 365 Proplus » Version: N/A
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Skype For Business Basic » Version: 2016
cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-8546

Top countries where our scanners detected CVE-2018-8546

Top open port discovered on systems with this issue 443

IPs affected by CVE-2018-8546 1,307

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-8546!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-8546

EPSS FAQ

0.45%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-8546

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

References for CVE-2018-8546

http://www.securityfocus.com/bid/105802

Microsoft Skype for Business and Lync CVE-2018-8546 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8546

CVE-2018-8546 | Microsoft Skype for Business Denial of Service Vulnerability
Patch;Vendor Advisory
http://www.securitytracker.com/id/1042125

Microsoft Skype for Business Emoji Processing Flaw Lets Remote Users Cause the Target Service to Crash - SecurityTracker
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2018-8546

Products affected by CVE-2018-8546

Threat overview for CVE-2018-8546

Exploit prediction scoring system (EPSS) score for CVE-2018-8546

CVSS scores for CVE-2018-8546

References for CVE-2018-8546