CVE-2018-0886

highPriorität · beachten · 67EPSS 0.820 · 100. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
2 exploits · PoC
Likely / severe?
82.0% (100th) EPSS
CVSS 7.6 · high
Is it mine?
39 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • Mitigationpepperl_fuchs_psirt

    Customers using Pepperl+Fuchs HMI devices out of VisuNet RM*, VisuNet PC* or Box Thin Client BTC* product families should follow these guidelines: - Pepperl+Fuchs HMI devices running RM Shell 4 should be updated with RM Image 4 Security Patches 01/2017 to 05/2018 (18-33400C): https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33400c - Pepperl+Fuchs HMI devices running RM Shell 5 should be updated with RM Image 5 Security: Windows Cumulative Security Patch 07/2018 (18-33624): https://www.pepperl-fuchs.com/cgi-bin/db/doci.pl/?ShowDocByDocNo=18-33624 - Pepperl+Fuchs HMI devices running Windows 7 or Windows 10 should be updated by using the Windows Update mechanism. - After deploying the patch all connected third-party clients or servers must use the latest version of the CredSSP protocol. Be aware of installing these patches, because security will be enforced by the update. Security by default restriction might result in an error due to encryption oracle remediation. Updates should be installed on both the server and the HMI device; otherwise, system compatibility might be influenced. This advisory will be updated as further details and/or software updates become available.

  • MitigationBox Thin Client BTCcisa_csaf_ot

    After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.

  • MitigationVisuNet PCcisa_csaf_ot

    After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.

  • MitigationVisuNet RMcisa_csaf_ot

    After deploying the patch, all connected third-party clients or servers must use the latest version of the CredSSP protocol.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.6
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.6highAV:N/AC:H/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 4.9 · Auswirkung 10
v3.07highCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1 · Auswirkung 5.9
v3.07.5highCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.07highCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Pepperl+Fuchs PSIRT DE
v3.07highCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)
v3.17highAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-287USprimärCWE-287USCWE-287USCWE-287US
04

Exploits (2)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (39)

Betroffene Produkte und Versionsbereiche.

20 von 39 angezeigt
06

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • VDE-2018-008Pepperl+Fuchs: Remote Code Execution Vulnerability in HMI Devices2018-07-06csaf · pepperl_fuchs_psirtDE

    A remote code execution vulnerability in the Microsoft's Credential Security Support Provider protocol (CredSSP) was identified by security researchers. If exploited successfully, it is possible to relay user credentials for arbitrary code execution on the target system. See details on Microsoft Advisory CVE-2018-0866 (https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-0886)

  • ICSA-18-198-03PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client2018-07-17icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a man-in-the-middle attack, achieve administrator privileges, and execute remote code.

07

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otpepperl_fuchs_psirtNVDCVE.orgMITRE
veröffentlicht 2018-03-14geändert 2026-06-17
10

Referenzen (24)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan