CVE-2018-16545

Name: CVE-2018-16545
Creator: NVD / NIST
Published: 2018-09-05T19:29:00.983+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.70%

Last modified Jun 17, 2026

CVE-2018-16545 is a vulnerability of currently unknown severity. Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library (dll) assumed the identity of a temporary (tmp) file (isxdl.dll) and an executable file assumed the identity of a temporary file (996E.temp).. EPSS estimates a 1.70% chance of exploitation in the next 30 days.

Description

Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library (dll) assumed the identity of a temporary (tmp) file (isxdl.dll) and an executable file assumed the identity of a temporary file (996E.temp).

Metrics

EPSS Probability

1.70%

74.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-732

Affected Software

Vendor	Product	Versions
Kzsoftware	Asset Manager	<= 1.0.1188.0
Kzsoftware	Training Manager	<= 1.0.1230.0

References

https://github.com/GitHubAssessments/CVE_Assessment_03_2018/blob/master/Kaizen_Report.pdfExploit, Third Party Advisory
https://github.com/GitHubAssessments/CVE_Assessment_03_2018/blob/master/Kaizen_Report.pdfExploit, Third Party Advisory

Timeline

Published: Sep 5, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-16545?

How severe is CVE-2018-16545?

Severity scoring for CVE-2018-16545 is pending analysis. The EPSS model estimates a 1.70% probability of exploitation in the next 30 days.

How do I fix CVE-2018-16545?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-16545?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST