CVE-2018-5198 HIGH

CVE-2018-5198: WIZVERA Veraport Race Condition Vulnerability

Vendor Wizvera
Product Veraport
Published December 20, 2018
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

In Veraport G3 ALL on MacOS, a race condition when calling the Veraport API allow remote attacker to cause arbitrary file download and execution. This results in remote code execution.

Key dates

02Disclosure timeline

December 20, 2018 CVE published
September 16, 2024 Record updated