CRITICAL

CVE-2018-9059

CVSS v3

9.8

CRITICAL

EPSS Score

83.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.

Technical details

Published
4/20/2018
Exploit-DB
EDB-44485 EDB-44522

Frequently asked questions

What is CVE-2018-9059?

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.

Is CVE-2018-9059 actively exploited?

Active exploitation of CVE-2018-9059 has not been confirmed. The EPSS score is 83.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2018-9059?

CVE-2018-9059 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2018-9059 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2018 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database