CVE-2018-18367
Last modified
CVE-2018-18367 is a vulnerability of currently unknown severity. Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.. EPSS estimates a 1.66% chance of exploitation in the next 30 days.
Description
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Symantec | Endpoint Protection Manager | 12.1 | Rtm |
| Symantec | Endpoint Protection Manager | 14 | — |
| Symantec | Endpoint Protection Manager | 14.0.1 | — |
| Symantec | Endpoint Protection Manager | 14.1 | — |
| Symantec | Endpoint Protection Manager | 14.2 | — |
References
- http://www.securityfocus.com/bid/107996Third Party Advisory, VDB Entry
- https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory
- http://www.securityfocus.com/bid/107996Third Party Advisory, VDB Entry
- https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18367?
How severe is CVE-2018-18367?
How do I fix CVE-2018-18367?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18361An issue was discovered in nc-cms through 2017-03-10. index.…
- CVE-2018-18362Norton Password Manager for Android (formerly Norton Identit…
- CVE-2018-18363Norton App Lock prior to 1.4.0.445 can be susceptible to a b…
- CVE-2018-18364Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU…
- CVE-2018-18365Norton Password Manager may be susceptible to an address spo…
- CVE-2018-18366Symantec Norton Security prior to 22.16.3, SEP (Windows clie…
- CVE-2018-18368Symantec Endpoint Protection Manager (SEPM), prior to 14.2 R…7.8
- CVE-2018-18369Norton Security (Windows client) prior to 22.16.3 and SEP SB…
- CVE-2018-18370The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FT…
- CVE-2018-18371The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FT…
- CVE-2018-18372A Stored XSS vulnerability has been discovered in KAASoft Li…
- CVE-2018-18373In the Schiocco "Support Board - Chat And Help Desk" plugin …
Are you affected by CVE-2018-18367?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST