CVE-2018-18435

State: Published
Severity: Not scored
Published: Mar 17, 2019
Updated: Aug 5, 2024
Reserved: Oct 17, 2018

Description

KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as "Localsystem", this will allow any user to escalate privileges to "NT AUTHORITY\SYSTEM" by substituting the service's binary with a malicious one.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://packetstormsecurity.com/files/151031/KioWare-Server-4.9.6-Privilege-Escalation.html
46093exploit
https://m.kioware.com/news/kioware-press-releases/kioware_server_security_patch_update
https://www.kioware.com/patch.aspx
https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-002.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.