CVE-2018-14825
Estado: ModificadaMedia (5.8)—
On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges.
Leer descripción completaMostrar menos
This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
- Puntuación base: 5.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.79%
- Percentil entre todas las CVEs puntuadas: 55
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (14)
CWE
- CWE-269
- CWE-732
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-14825",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.8,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 4.7,
"exploitabilityScore": 1
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Honeywell",
"product": "Mobile Computers",
"versions": [
{
"status": "affected",
"version": "CT60 running Android OS 7.1"
},
{
"status": "affected",
"version": "CN80 running Android OS 7.1"
},
{
"status": "affected",
"version": "CT40 running Android OS 7.1"
},
{
"status": "affected",
"version": "CK75 running Android OS 6.0"
},
{
"status": "affected",
"version": "CN75 running Android OS 6.0"
},
{
"status": "affected",
"version": "CN75e running Android OS 6.0"
},
{
"status": "affected",
"version": "CT50 running Android OS 6.0"
},
{
"status": "affected",
"version": "D75e running Android OS 6.0"
},
{
"status": "affected",
"version": "CT50 running Android OS 4.4"
},
{
"status": "affected",
"version": "D75e running Android OS 4.4"
},
{
"status": "affected",
"version": "CN51 running Android OS 6.0"
},
{
"status": "affected",
"version": "EDA50k running Android 4.4"
},
{
"status": "affected",
"version": "EDA50 running Android OS 7.1"
},
{
"status": "affected",
"version": "EDA50k running Android OS 7.1"
},
{
"status": "affected",
"version": "EDA70 running Android OS 7.1"
},
{
"status": "affected",
"version": "EDA60k running Android OS 7.1"
},
{
"status": "affected",
"version": "EDA51 running Android OS 8.1"
}
]
}
]
}
],
"published": "2018-09-24T19:29:00.507",
"references": [
{
"url": "http://www.securityfocus.com/bid/105767",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://cert.vde.com/de-de/advisories/vde-2018-016",
"tags": [
"Third Party Advisory"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-256-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://www.securityfocus.com/bid/105767",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://cert.vde.com/de-de/advisories/vde-2018-016",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-256-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-732"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "On Honeywell Mobile Computers (CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e running Android OS 4.4, CN51 running Android OS 6.0, EDA50k running Android 4.4, EDA50 running Android OS 7.1, EDA50k running Android OS 7.1, EDA70 running Android OS 7.1, EDA60k running Android OS 7.1, and EDA51 running Android OS 8.1), a skilled attacker with advanced knowledge of the target system could exploit this vulnerability by creating an application that would successfully bind to the service and gain elevated system privileges. This could enable the attacker to obtain access to keystrokes, passwords, personal identifiable information, photos, emails, or business-critical documents."
},
{
"lang": "es",
"value": "En Honeywell Mobile Computers (CT60 con Android OS 7.1, CN80 con Android OS 7.1, CT40 con Android OS 7.1, CK75 con Android OS 6.0, CN75 con Android OS 6.0, CN75e con Android OS 6.0, CT50 con Android OS 6.0, D75e con Android OS 6.0, CT50 con Android OS 4.4, D75e con Android OS 4.4, CN51 con Android OS 6.0, EDA50k con Android 4.4, EDA50 con Android OS 7.1, EDA50k con Android OS 7.1, EDA70 con Android OS 7.1, EDA60k con Android OS 7.1 y EDA51 con Android OS 8.1), un atacante habilidoso con conocimientos avanzados del sistema objetivo podría explotar esta vulnerabilidad creando una aplicación que se enlazaría exitosamente al servicio y obtendría privilegios elevados en el sistema. Esto podría permitir que el atacante obtenga acceso a las pulsaciones de teclas, contraseñas, información personal identificable, fotografías, emails o documentos críticos para una empresa."
}
],
"lastModified": "2026-06-17T01:41:43.003",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:cn80:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1D869B3-0F99-4B0B-8D45-A2CC49FD34B8"
},
{
"criteria": "cpe:2.3:h:honeywell:ct40:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41E581B1-2DF5-4976-A98D-86410DC093FE"
},
{
"criteria": "cpe:2.3:h:honeywell:ct60:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2DFDCE6-48B4-43B2-8A4C-EBBD009F1D35"
},
{
"criteria": "cpe:2.3:h:honeywell:eda50:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF7F4ED7-2E7A-469A-AF94-1D777BC524BB"
},
{
"criteria": "cpe:2.3:h:honeywell:eda50k:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F6DCB47-E75C-4493-AEFC-AA85CF6D1911"
},
{
"criteria": "cpe:2.3:h:honeywell:eda60k:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16F1DC1D-8A7C-49FC-BC3F-9E8E8C6E76EB"
},
{
"criteria": "cpe:2.3:h:honeywell:eda70:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D21E5A7-4167-4DD2-B3D4-8911EBCA6168"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC30B2A2-9674-4052-B402-20348E50F9E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:ck75:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69EF9A2F-B102-4115-85A3-EE5C21C0169B"
},
{
"criteria": "cpe:2.3:h:honeywell:cn51:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72A6CB80-88B2-4DEB-8912-236C6FABF90B"
},
{
"criteria": "cpe:2.3:h:honeywell:cn75:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6BBD6E9-0540-4263-BA52-019E5BB51ABA"
},
{
"criteria": "cpe:2.3:h:honeywell:cn75e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD4A2025-004B-448C-87E1-B432C77AE2E4"
},
{
"criteria": "cpe:2.3:h:honeywell:d75e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FD442EE-7AC6-4D4C-8862-5CA6F731DBC7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:ct50:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C29434F4-0DB7-4CDD-A37E-54CB227B4C39"
},
{
"criteria": "cpe:2.3:h:honeywell:d75e:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FD442EE-7AC6-4D4C-8862-5CA6F731DBC7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA"
},
{
"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:eda50k:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F6DCB47-E75C-4493-AEFC-AA85CF6D1911"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:honeywell:eda51:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B51B9958-2621-4403-B59C-703538E8321E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}