CVE-2018-7602

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi Dipakai ransomware EPSS 99,2%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada drupal, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 13 April 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

Rincian

Terbit di NVD

19 Juli 2018

Terakhir diubah

2 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

99,2% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Drupal Core Remote Code Execution Vulnerability

Masuk KEV

13 April 2022

Tenggat CISA

4 Mei 2022 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.drupal.org/sa-core-2018-004 patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7602 pemerintah AS
• http://www.securityfocus.com/bid/103985 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1040754 broken link · advisory pihak ketiga · vdb entry
• https://lists.debian.org/debian-lts-announce/2018/04/msg00030.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2018/dsa-4180 advisory pihak ketiga
• https://www.exploit-db.com/exploits/44542/ exploit · advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/44557/ exploit · advisory pihak ketiga · vdb entry