CVE-2018-18603 - CVE House
Back to Database
Status published Medium CVE-2018-18603

360 Total Security 3.5.0.1033 allows a Sandbox Escape via an...

Vulnerability Description

360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"), within a .py file. NOTE: the vendor's position is that this cannot be categorized as a vulnerability, although it is a security-related issue

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-18603

Credits & Attribution

No credits recorded in the NVD database.

References

More from 360totalsecurity

View All →
CVE-2021-33973
Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005,...
Unknown 0
CVE-2017-12653
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via...
High 7.8

Affected Vendor

360totalsecurity

View all reports →

Affected Software

360 total security
Vulnerable Versions:
3.5.0.1033

Timeline

Official Publish: October 23rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.