7.8

CVE-2018-0952

Exploit

EPSS 39.18%
Published 15.08.2018 17:29:00
Last modified 21.11.2024 03:39:17
Source secure@microsoft.com
Teams watchlist Login
Open Login

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Visual Studio 2015 Version- Updateupdate3

Microsoft ≫ Visual Studio 2017 Version-

Microsoft ≫ Visual Studio 2017 Version15.8

Microsoft ≫ Windows 10 Version-

Microsoft ≫ Windows 10 Version1607

Microsoft ≫ Windows 10 Version1703

Microsoft ≫ Windows 10 Version1709

Microsoft ≫ Windows 10 Version1803

Microsoft ≫ Windows Server 2016 Version-

Microsoft ≫ Windows Server 2016 Version1709

Microsoft ≫ Windows Server 2016 Version1803

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	39.18%	0.972

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/105048

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041466

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952

Patch

Vendor Advisory

https://www.exploit-db.com/exploits/45244/

Third Party Advisory

Exploit

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-0952

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0952

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0952

EUVD