CVE-2018-16156
CVSS v3
7.8
HIGH
EPSS Score
13.1 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.
Technical details
- Published
- 2019-05-17
- Exploit-DB
- EDB-49382
Frequently asked questions
What is CVE-2018-16156?
In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.
Is CVE-2018-16156 actively exploited?
Active exploitation of CVE-2018-16156 has not been confirmed. The EPSS score is 13.1%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2018-16156?
CVE-2018-16156 has a CVSS v3 base score of 7.8 (HIGH severity).
Is CVE-2018-16156 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2018 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).