CVE-2018-11008 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.5 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 33%

Affected Products (NVD)

Vendor	Product	Version
k7computing	antivrius	𝑥 < 16.0.0001
k7computing	enterprise_security	𝑥 < 14.2.0001
k7computing	total_security	𝑥 < 16.0.0001
k7computing	ultimate_security	𝑥 < 16.0.0001

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-269 - Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References

https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021

https://www.k7computing.com

https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021

https://www.k7computing.com