Lucene search
K

6 matches found

CNVD
CNVD
added 2018/07/13 12:0 a.m.1 views

RedSwimmer KioskSimple Privilege Access Control Vulnerability

RedSwimmer KioskSimple is a self-service server software from RedSwimmer USA. A privilege access control vulnerability exists in the WCF endpoint of the KioskSimpleService.exe file in RedSwimmer KioskSimple version 1.4.7.0. An attacker can exploit this vulnerability to gain read and write access ...

10CVSS9.7AI score0.00695EPSS
Exploits0References1
Prion
Prion
added 2018/07/03 12:29 p.m.10 views

Privilege escalation

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via executio...

10CVSS9.5AI score0.00695EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/07/03 12:29 p.m.1 views

CVE-2018-13101

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via executio...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2018/07/03 12:29 p.m.10 views

CVE-2018-13101

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via executio...

10CVSS9.6AI score0.00695EPSS
Exploits0References1
CVE
CVE
added 2018/07/03 11:0 a.m.32 views

CVE-2018-13101

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 has a privilege escalation flaw in the WCF endpoint. The exposed methods allow read/write access to the Windows registry and control of services, which attackers could abuse to escalate privileges via execution of attacker-controlled binari...

10CVSS9.5AI score0.00695EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/07/03 11:0 a.m.11 views

CVE-2018-13101

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via executio...

9.6AI score0.00695EPSS
Exploits0References1
Rows per page
Query Builder