8.4high
CVE-2018-17488
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
8.4
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 30%
Public exploits
0
none known
Summary
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Exploit prediction (EPSS)
0.36% probability of exploitation in the next 30 days, higher than 30% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 8.4 | CVSS:3.0/UI:N/S:U/AV:L/A:H/PR:N/I:H/AC:L/C:H/E:U/RL:U/RC:R |
| CNA | 3.0 | 8.4 | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Jolly Technologies Lobby Track Desktop
References
- exchange.xforce.ibmcloud.com /vulnerabilities/149648 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2018-17488
- NVD: CVE-2018-17488
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.