CVEvulnerability
CVE-2018-10425
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-04-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because SetParent is not properly considered.
Affected configurations
• hz-soft security guard 3.7.0
References
- https://github.com/rebol0x6c/2345poc Exploit, Third Party Advisory
- https://github.com/rebol0x6c/2345poc Exploit, Third Party Advisory