CVE-2018-13101

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via execution of attacker controlled binaries.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/VerSprite/research/blob/master/advisories/VS-2018-026.mdThird Party Advisory
https://github.com/VerSprite/research/blob/master/advisories/VS-2018-026.mdThird Party Advisory

Timeline

Published: Jul 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-131027.8AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability.CVE-2018-131035.4OX App Suite 7.8.4 and earlier allows SSRF.CVE-2018-131045.4OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)CVE-2018-131064.8ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configuration" screen of the manager/ URI.CVE-2018-131087.8All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers ar CVE-2018-131097.5All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers a CVE-2018-13118.1The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has CVE-2018-131107.5All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers ca CVE-2018-131115.9There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to cra CVE-2018-131127.5get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and app CVE-2018-131137.5The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer CVE-2018-131149.8Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands