CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-05-31
Quest KACE System Management Appliance Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2018-11138)
[Affected Scope] Quest KACE System Management Appliance (SMA) 8.0.318 and prior versions
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with high privileges by sending specially crafted HTTP requests
[Mitigation] Apply official vendor patches immediately and restrict external internet access to the management interface