8.8high

CVE-2018-0701

BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attac…

Published 7 y ago · modified 4 mo ago · JSON

CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 47%
Public exploits
0
none known

Summary

BlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player for macOS 2.0.0 and later) allows an attacker on the same network segment to bypass access restriction to gain unauthorized access.

Exploit prediction (EPSS)

0.57% probability of exploitation in the next 30 days, higher than 47% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.08.8CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.05.8AV:A/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • BlueStacks BlueStacks App Player

References

  • support.bluestacks.com /hc/en-us/articles/360018274091 · x_refsource_MISC, x_transferred
  • jvn.jp /en/jp/JVN60702986/index.html · third-party-advisory, x_refsource_JVN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.