CVE-2018-17892 NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended, which could allow user a...
HighCVSS 8.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended, which could allow user account compromise and may allow for remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuuo cms | <= 3.1 | No fix listed |
| nuuo cms | = All versions 3.1 and prior | No fix listed |
References
- 105717 third-party-advisory vdb-entry
- ics-cert.us-cert.gov patch third-party-advisory us-government-resource