CVE-2018-8724
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is caused by incorrect access control in the K7TSMngr.exe component. It allows a local attacker to escalate privileges on the system.
Risk Assessment
The organization faces the risk of privilege escalation by a local user, which could lead to unauthorized access to sensitive data or full system compromise.
Recommendation
It is recommended to immediately update K7AntiVirus Premium to the latest version that fixes this vulnerability. Additionally, restrict local access to systems running this software.
Other vulnerabilities in K7AntiVirus Premium
See all- CVE-2018-9333High
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.1.0.53 by K7Computing Pvt Ltd, affecting the K7TSMngr.exe process. This vulnerability allows a local attacker to execute arbitrary code on the system.
- CVE-2018-9332High
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is caused by incorrect access control. It allows a local attacker to gain elevated privileges on the system.
- CVE-2018-8725High
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.01.00.53 by K7Computing, specifically in the K7TSMngr.exe process. This flaw allows a local attacker to execute arbitrary code.
Original NVD description (English source)
K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). The component is: K7TSMngr.exe.