CVE-2018-17495
- State
- Published
- Severity
- 8.4 High
- Published
- Mar 19, 2019
- Updated
- Sep 17, 2024
- Reserved
- Sep 25, 2018
Description
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 8.4 High | CVSS:3.0/UI:N/S:U/I:H/AV:L/A:H/PR:N/AC:L/C:H/E:U/RL:O/RC:C | ibm |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
eVisitorPassVisitorPass |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.