« Volver al listado

CVE-2018-16183

Estado: ModificadaAlta (7.8)—

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Panasonic — System Interface Device 0021Panasonic — System Interface Device 0040

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-16183",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "Panasonic Corporation",
          "product": "Some pre-installed applications on Panasonic PC",
          "versions": [
            {
              "status": "affected",
              "version": "run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-01-09T23:29:03.967",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN36895151/index.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://pc-dl.panasonic.co.jp/dl/docs/077770",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jvn.jp/en/jp/JVN36895151/index.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://pc-dl.panasonic.co.jp/dl/docs/077770",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-428"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit), Windows 10 (64bit) delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de ruta de búsqueda sin entrecomillar en algunas aplicaciones preinstaladas en Panasonic PC, ejecutando Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), Windows 8.1 (64bit) y Windows 10 (64bit), publicadas después de octubre de 2009, permite que los usuarios locales obtengan privilegios mediante un archivo ejecutable troyano y ejecuten código arbitrario con privilegios elevados."
    }
  ],
  "lastModified": "2026-06-17T01:43:50.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:panasonic:system_interface_device_0021:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53D13CFE-4B01-4D51-B4DF-53CF3EA05FE6"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "0A0BDE6A-12A0-4EC3-AAB9-5AA924D7DDA5"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "A3073A66-DC15-4414-89EB-01FFCBA9FC1D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "403D4831-D1CE-4A1F-97B2-16DA39C876BE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:panasonic:system_interface_device_0040:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D292E2EF-53FF-47BE-8A16-2A2BCBAD5261"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "0A0BDE6A-12A0-4EC3-AAB9-5AA924D7DDA5"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "A3073A66-DC15-4414-89EB-01FFCBA9FC1D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*",
              "vulnerable": false,
              "matchCriteriaId": "403D4831-D1CE-4A1F-97B2-16DA39C876BE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}