CVE-2018-15153: Command Injection
Published Aug 15, 2018
·Updated
OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemonframe.php after modifying the "hylafaxserver" global variable in interface/super/editglobals.php.
Affected Software
1 affected component
open-emr Openemr<5.0.1.4
Remediation
Patch Available
Event History
Aug 15, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15153?
CVE-2018-15153 is considered a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2018-15153?
To fix CVE-2018-15153, update OpenEMR to version 5.0.1.4 or later.
3
Who is affected by CVE-2018-15153?
CVE-2018-15153 affects OpenEMR versions prior to 5.0.1.4.
4
What types of attacks can exploit CVE-2018-15153?
CVE-2018-15153 can be exploited by authenticated remote attackers to execute arbitrary OS commands.
5
How does CVE-2018-15153 impact system security?
CVE-2018-15153 allows attackers to gain control over a vulnerable system by executing commands, compromising its integrity.