CVE-2018-13140

Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages.

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

6.63% chance of exploitation in the next 30 days, 93th percentile

Published

2018-09-24

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
• http://seclists.org/fulldisclosure/2018/Sep/38

References

• CVE Record
• NVD entry

Related

• CVE-2018-13137
• CVE-2018-13155
• CVE-2018-13134
• CVE-2018-13156
• CVE-2018-1313
• CVE-2018-13157