CVE-2018-15885 - CVE House
Back to Database
Status published High CVE-2018-15885

Ovation FindMe 1.4-1083-1 is intended to support transmission of network...

Vulnerability Description

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. Specifically, the product uses a compression technique to prevent the identification of certain libraries in the software by obfuscation. The software relies on a TLS callback and an additional executable file to enable these libraries and their access to certain websites. The unpacked software can be exploited by several different types of documented techniques.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15885

Credits & Attribution

No credits recorded in the NVD database.

References

More from ovation

View All →
CVE-2021-3327
Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the...
Medium 5.4

Affected Vendor

Affected Software

findme
Vulnerable Versions:
1.4-1083-1

Timeline

Official Publish: August 26th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.