CVE-2018-6289

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74

Affected software

VendorProductVersions
Kaspersky LabsKaspersky Secure Mail Gateway1.1

References

Timeline

Published
Feb 6, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-62907.8Local Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62916.1WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.CVE-2018-62929.8Remote Code Execution in Saperion Web Client version 7.5.2 83166.CVE-2018-62937.5Arbitrary File Read in Saperion Web Client version 7.5.2 83166.CVE-2018-62949.8Unsecured way of firmware update in Hanwha Techwin SmartcamsCVE-2018-62959.8Unencrypted way of remote control and communications in Hanwha Techwin SmartcamsCVE-2018-62965.3An undocumented (hidden) capability for switching the web interface in Hanwha Techwin SmartcamsCVE-2018-62979.8Buffer overflow in Hanwha Techwin SmartcamsCVE-2018-62989.8Remote code execution in Hanwha Techwin SmartcamsCVE-2018-62999.8Authentication bypass in Hanwha Techwin SmartcamsCVE-2018-63009.8Remote password change in Hanwha Techwin SmartcamsCVE-2018-63017.5Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
CVE-2018-6289: Critical severity, CVSS 9.8 | Vulnix