3.1low
CVE-2018-08781 exploit
Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
3.1
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
21.1%
percentile 98%
Public exploits
1
Exploit-DB
Summary
Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how XML External Entities (XXE) are processed, aka "Windows Remote Assistance Information Disclosure Vulnerability".
CISA SSVC assessment
- Exploitation
- Proof of concept public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 19 mo ago
Exploit prediction (EPSS)
21.12% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-44352 Microsoft Windows Remote Assistance - XML External Entity Injection · webapps · 2018-03-28
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
| CNA | 3.1 | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
| NVD | 3.0 | 3.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:P/I:N/A:N |
Affected products
- Microsoft Corporation Windows Remote Assistance
Classification
- Weakness
- CWE-611 Improper Restriction of XML External Entity Reference
References
- securitytracker.com /id/1040519 · vdb-entry, x_refsource_SECTRACK, x_transferred
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-0878 · x_refsource_CONFIRM, x_transferred
- exploit-db.com /exploits/44352/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securityfocus.com /bid/103230 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-0878
- NVD: CVE-2018-0878
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.