CVE-2018-18388 Command injection in n/a
Remote or local attackers can execute arbitrary commands on eScan Agent by sending crafted payloads to TCP port 2222.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-18388?
CVE-2018-18388 is a critical command injection vulnerability in n/a, published on 20 Dec 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port 2222.
Which versions are affected by CVE-2018-18388?
It affects 1 product.
Products include Escanav Escan Anti-Virus.
How do I fix CVE-2018-18388?
No fix has been published for CVE-2018-18388 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-18388 being exploited?
There is no known exploitation of CVE-2018-18388 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2025-0798 MicroWorld eScan Antivirus Quarantine rtscanner os command injection
- CVE-2023-4383 MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions
- CVE-2021-26624 eScan Anti-Virus Local privilege escalation Vulnerability
- CVE-2023-2875 eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference
- CVE-2025-1366 MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow
Sources
Also known as GHSA-qg5q-gxwj-cgv6.