CVE-2018-9332
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is caused by incorrect access control. It allows a local attacker to gain elevated privileges on the system.
Risk Assessment
The organization faces the risk of privilege escalation by a local user, which could lead to unauthorized access to sensitive data or full system compromise.
Recommendation
It is recommended to immediately update K7AntiVirus Premium to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in K7AntiVirus Premium
See all- CVE-2018-9333High
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.1.0.53 by K7Computing Pvt Ltd, affecting the K7TSMngr.exe process. This vulnerability allows a local attacker to execute arbitrary code on the system.
- CVE-2018-8725High
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.01.00.53 by K7Computing, specifically in the K7TSMngr.exe process. This flaw allows a local attacker to execute arbitrary code.
- CVE-2018-8724High
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is caused by incorrect access control in the K7TSMngr.exe component. It allows a local attacker to escalate privileges on the system.
Original NVD description (English source)
K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local).