Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Dewesoft Subscribe
Filtered by product Dewesoft
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-7756 1 Dewesoft 1 Dewesoft 2018-04-12 10.0 HIGH 9.8 CRITICAL
RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary external URL, or a "SETFIREWALL Off" command.