CVE-2018-18552 ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK f...
MediumCVSS 6.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug (via the sensor_details.html id parameter) that allows creating empty files in arbitrary directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| serverscheck monitoring software | <= 14.3.3 | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry