Lucene search

MicrosoftCVE-2018-8414

HistoryAug 15, 2018 - 5:29 p.m.

CVE-2018-8414

2018-08-1517:29:10

CWE-20

microsoft

web.nvd.nist.gov

851

In Wild

cve-2018-8414

windows shell

remote code execution

vulnerability

nvd

windows 10 servers

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.767

Percentile

98.2%

JSON

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka “Windows Shell Remote Code Execution Vulnerability.” This affects Windows 10 Servers, Windows 10.

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10Match1703

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_serverMatch1709

microsoftwindows_serverMatch1803

VendorProductVersionCPE
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_server1709cpe:2.3:o:microsoft:windows_server:1709:*:*:*:*:*:*:*
microsoftwindows_server1803cpe:2.3:o:microsoft:windows_server:1803:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*
microsoft	windows_10	1709	cpe:2.3:o:microsoft:windows_10:1709:::::::*
microsoft	windows_10	1803	cpe:2.3:o:microsoft:windows_10:1803:::::::*
microsoft	windows_server	1709	cpe:2.3:o:microsoft:windows_server:1709:::::::*
microsoft	windows_server	1803	cpe:2.3:o:microsoft:windows_server:1803:::::::*

CNA Affected

[
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1709  (Server Core Installation)"
      },
      {
        "status": "affected",
        "version": "version 1803  (Server Core Installation)"
      }
    ]
  },
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1803 for x64-based Systems"
      }
    ]
  }
]