CVE-2018-11138

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

92.06% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-25, used in ransomware campaigns

Nuclei

critical · CWE-78

Published

2018-05-31

Updated

2026-08-13

Proof-of-concept exploits (1)

• https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-v…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11138.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/quest_kace_systems_man…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44950

References

• CVE Record
• NVD entry

Related

• CVE-2018-11137
• CVE-2018-11139
• CVE-2018-11136
• CVE-2018-11140
• CVE-2018-11135
• CVE-2018-11141