CVE-2018-11551 - AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system

Back Back to CVE browser

HIGH

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system

Published Jun 1, 2018

7.8

HIGH

CVSS 3.0

EPSS 2.50%

Description

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (2)

http://seclists.org/fulldisclosure/2018/May/69
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3578
Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2018/May/69		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3578		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 1, 2018

Updated Aug 5, 2024

Reserved May 29, 2018

Link CVE-2018-11551

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-11551

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 1, 2018

Updated Aug 5, 2024

Link EUVD-2018-3578

GitHub

No data