CVE-2018-10604 - CVE House
Back to Database
Status published High CVE-2018-10604

SEL Compass version 3.0.5.1 and prior allows all users full...

Vulnerability Description

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-10604

Credits & Attribution

No credits recorded in the NVD database.

References

More from Schweitzer Engineering Laboratories, Inc.

View All →
CVE-2018-10608
SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited...
High 7.5
CVE-2018-10600
SEL AcSELerator Architect version 2.2.24.0 and prior allows unsanitized input...
Critical 9.8

Affected Vendor

Schweitzer Engineering Laboratories, Inc.

View all reports →

Affected Software

Compass
Vulnerable Versions:
3.0.5.1 and prior

Timeline

Official Publish: July 24th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276

MITRE ATT&CK TTPs

T1222 File and Directory Permissions Modification
Defense Evasion
T1078 Valid Accounts
Persistence
T1574 Hijack Execution Flow
Privilege Escalation
T1021 Remote Services
Lateral Movement
T1005 Data from Local System
Collection