CVE-2018-17496

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode

High · published March 19, 2019

CVSS v3.0
8.4
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system.

The record
Technical detail
CVSS v3.0
8.4 · HIGH
Vector
CVSS:3.0/C:H/AC:L/I:H/A:H/PR:N/AV:L/S:U/UI:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.3th percentile
Published
2019-03-19T19:47Z
EPSS history
Timeline
  • 19 MAR 19:47Z
    eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode
    cvelistv5