CVE-2018-7289

mediumpriority · track · 24EPSS 0.017 · 77 %ileexploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.72% (77th) EPSS

CVSS 4.3 · medium

Is it mine?

2 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-26

An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. Malware with filenames containing pure UTF-16 characters can bypass detection. The user-mode service will fail to open the file for scanning after the conversion is done from Unicode to ANSI. This happens because characters that cannot be converted from Unicode are replaced with '?' characters.

cvss

Technical severity, 0–10. One row per scoring source.

4.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.2–4.3

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.03.3lowCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Nprimary · NVD / NIST USexploitability 1.8 · impact 1.4

v3.03.2lowCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-172USprimary

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-44169Armadito Antivirus 0.12.7.2 - Detection BypassPoC · exploit_db

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
teclib-edition armadito antivirus= 0.12.7.2nvdUScpe:2.3:a:teclib-edition:armadito_antivirus:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2018-02-21modified 2026-06-17

related (31)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2019-10160US	critical9.8	5.23% (92nd)	—	2019-06-07
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 throug…
CVE-2024-38474US	critical9.8	2.46% (84th)	—	2024-07-01
Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directl…
CVE-2018-3777US	critical9.8	1.51% (74th)	—	2018-08-03
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
CVE-2016-6691US	critical9.8	1.30% (70th)	—	2016-10-10
service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of service (framework cr…
CVE-2019-15604US	high7.5	20.0% (97th)	—	2020-02-07
Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

+26 more

references (5)

External citations — patches, advisories, analysis.

https://github.com/armadito/armadito-windows-driver/issues/5 cnnvd
https://github.com/armadito/armadito-windows-driver/issues/5 enisa_euvd
https://www.exploit-db.com/exploits/44169/enisa_euvd
https://github.com/armadito/armadito-windows-driver/issues/5Third Party Advisorynvd
https://www.exploit-db.com/exploits/44169/ExploitThird Party AdvisoryVDB Entrynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan