CVE-2018-16545

Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file…

published September 5, 2018

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library (dll) assumed the identity of a temporary (tmp) file (isxdl.dll) and an executable file assumed the identity of a temporary file (996E.temp).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01698 · 77.0th percentile
Published
2018-09-05T19:00Z
EPSS history
Timeline
  • 05 SEP 19:00Z
    Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve arbitrary code execution via file…
    cvelistv5