Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-8546
HistoryNov 14, 2018 - 1:29 a.m.

CVE-2018-8546

2018-11-1401:29:00
[email protected]
web.nvd.nist.gov
7

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

A denial of service vulnerability exists in Skype for Business, aka “Microsoft Skype for Business Denial of Service Vulnerability.” This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.

Affected configurations

Nvd
Node
microsoftlyncMatch2013sp1
OR
microsoftlync_basicMatch2013sp1
OR
microsoftofficeMatch2019
OR
microsoftoffice_365_proplusMatch-
OR
microsoftskype_for_businessMatch2016
OR
microsoftskype_for_business_basicMatch2016
VendorProductVersionCPE
microsoftlync2013cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
microsoftlync_basic2013cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:*:*
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
microsoftoffice_365_proplus-cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
microsoftskype_for_business2016cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
microsoftskype_for_business_basic2016cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*

Related

mscve 1
cvelist 1
symantec 1
cve 1
packetstorm 1
prion 1
mskb 2
nessus 1
checkpoint_advisories 1
threatpost 1
openvas 1
kaspersky 1
talosblog 1
thn 1
mscve
mscve
Microsoft Skype for Business Denial of Service Vulnerability
2018-11-13 08:00:00
cvelist
cvelist
CVE-2018-8546
2018-11-14 01:00:00
symantec
symantec
Microsoft Skype for Business and Lync CVE-2018-8546 Denial of Service Vulnerability
2018-11-13 00:00:00
cve
cve
CVE-2018-8546
2018-11-14 01:29:00
packetstorm
packetstorm
Microsoft Skype 2015 / 2016 Denial Of Service
2018-11-21 00:00:00
prion
prion
Denial of service
2018-11-14 01:29:00
mskb
mskb
Security update 2018-11-13
2018-11-13 08:00:00
Security update 2018-11-13
2018-11-13 08:00:00
nessus
nessus
Security Updates for Microsoft Skype for Business and Microsoft Lync (November 2018)
2018-11-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Skype for Business Denial of Service (CVE-2018-8546)
2018-11-26 00:00:00
threatpost
threatpost
Emoji Attack Can Kill Skype for Business Chat
2018-11-16 21:25:27
openvas
openvas
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Nov 2018)
2018-11-14 00:00:00
kaspersky
kaspersky
KLA11349 Multiple vulnerabilities in Microsoft Office
2018-11-13 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
2018-11-13 10:53:00
thn
thn
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
2018-11-14 09:55:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON
Related for NVD:CVE-2018-8546
mscve1cvelist1symantec1cve1packetstorm1prion1mskb2nessus1checkpoint_advisories1threatpost1openvas1kaspersky1talosblog1thn1