Vulnerability in Thresholdsecurity Evisitorpass
CVE-2018-17493
eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other processes on the system.
EPSS: 0.004 (31.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.4 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Thresholdsecurity Evisitorpass — versions 1.5.5.2
- Visitorpass Evisitorpass — versions 1.5.5.2
Public proof-of-concept exploits
References
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2018-17493?
- CVE-2018-17493 is a high-severity vulnerability in Thresholdsecurity Evisitorpass. CVSS score: 8.4/10. Published 2019-03-21.
- How severe is CVE-2018-17493?
- High severity. CVSS v3 base score is 8.4 out of 10.
- Is CVE-2018-17493 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.