CVE-2018-10201

An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11

published April 20, 2018

CVSS
—
EPSS
44%
Percentile
98.7
In the wild
Unconfirmed
What it is

An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root directory of the web server. This vulnerability could be exploited remotely by a crafted URL without credentials, with .../ or ...\ or ..../ or ....\ as a directory-traversal pattern to TCP port 8667.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.43790 · 98.7th percentile
Published
2018-04-20T08:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 44% → 20%
    epss
  • 06 SEP 03:11Z
    EPSS moved 44% → 20%
    epss
  • 30 AUG 16:00Z
    EPSS moved 20% → 44%
    epss
  • 29 AUG 04:30Z
    EPSS moved 46% → 20%
    epss
  • 20 APR 08:00Z
    An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11
    cvelistv5