CVE-2018-25261

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Out-of-bounds Write pada entersrl iperius backup. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location field that triggers a buffer overflow when the backup job executes, enabling code execution with application privileges.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/iperius-backup-local-buffer-overflow-seh advisory pihak ketiga
• https://www.exploit-db.com/exploits/46059 exploit · vdb entry
• https://www.iperiusbackup.com product