CVE-2018-6321: High severity Pandasecurity Panda Global Protection vulnerability
Published Mar 12, 2018
·Updated
Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact.
Affected Software
1 affected component
Pandasecurity Panda Global Protection=17.0.1
Event History
Mar 12, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6321?
CVE-2018-6321 has a medium severity rating, indicating a moderate impact on system security.
2
How do I fix CVE-2018-6321?
To mitigate CVE-2018-6321, ensure that the Panda Global Protection service is set to run with a fully qualified path to the executable.
3
Who is affected by CVE-2018-6321?
CVE-2018-6321 affects users of Panda Global Protection version 17.0.1.
4
What exploitation methods exist for CVE-2018-6321?
Exploiting CVE-2018-6321 typically involves placing a malicious artifact in an unquoted search path to execute arbitrary code with elevated privileges.
5
Is CVE-2018-6321 a zero-day vulnerability?
CVE-2018-6321 is not classified as a zero-day vulnerability since it was publicly disclosed in 2018.