Security Advisory

CVE-2018-5202

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-21 16:00:00
Last updated 2024-09-16 20:36:19
Assigner krcert
CVSS score not scored
State PUBLISHED

Description

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.