CVE-2018-10604

2018-07-1000:00:00

CWE-276

icscert

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.

CNA Affected

[
  {
    "product": "Compass",
    "vendor": "Schweitzer Engineering Laboratories, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "3.0.5.1 and prior"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-18-191-02