vulnwire
7.5high

CVE-2018-10201in critical feed1 exploitNuclei template

An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
43.8%
percentile 99%
Public exploits
1
Exploit-DB · Nuclei check

An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667.

Exploit prediction (EPSS)

43.79% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Nuclei template Ncomputing vSPace Pro 10 and 11 - Directory Traversal · nuclei detection template
  • EDB-44497 Ncomputing vSpace Pro 10/11 - Directory Traversal · webapps · 2018-04-23

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

  • kwell.net /kwell/index.php?option=com_newsfeeds&view=newsfeed&id=15&Itemid=173&lang=es · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/44497/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • kwell.net /kwell_blog/?p=5199 · x_refsource_MISC, x_transferred
  • support.ncomputing.com /portal/kb/articles/ncomputing-health-monitor-server-vulnerability-patch · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.