CVE-2018-13012 Supply chain in n/a
Remote attackers can execute unauthorized code by substituting a forged update server due to improper integrity checks in update mechanisms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13012?
CVE-2018-13012 is a high-severity vulnerability in n/a, published on 29 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.12 allows the remote attacker to execute unauthorized code by substituting a forged update server.
Weakness: CWE-494
Which versions are affected by CVE-2018-13012?
It affects 3 products.
Products include Safensoft Softcontrol Enterprise Suite, Safensoft Softcontrol Syswatch, Safensoft Softcontrol Tpsecure.
How do I fix CVE-2018-13012?
No fix has been published for CVE-2018-13012 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-13012 being exploited?
There is no known exploitation of CVE-2018-13012 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-p3mh-hp36-p892.