Privilege escalation in TotalAV - CVE-2018-7535
Published: July 23, 2018 / Updated: July 27, 2018
Vulnerability identifier: #VU14029
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-7535
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: TotalAV
Affected software:
TotalAV
TotalAV
Detailed vulnerability description
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists in the access control that is set and modified during the installation of the product due to weak "C:\Program Files\TotalAV" permissions. A local attacker can gain elevated privileges and execute arbitrary code under the context of Administrator, the IUSR account, or SYSTEM.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
How to mitigate CVE-2018-7535
Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.