CVE-2018-5197 - CVE House
Back to Database
Status published High CVE-2018-5197

A vulnerability in the ExtCommon.dll user extension module version 9.2,...

Vulnerability Description

A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5197

Credits & Attribution

No credits recorded in the NVD database.

References

More from TOBESOFT

View All →
CVE-2021-26612
tobesoft Nexacro platform arbitrary file creation vulnerability
High 8.1
CVE-2021-26607
TOBESOFT NEXACRO17 arbitrary command execution vulnerability
High 8.1
CVE-2020-7874
NEXACRO14 Runtime arbitrary file download and execution vulnerability
High 8.8
CVE-2020-7841
TOBESOFT XPLATFORM arbitrary hta file execution vulnerability
High 8.8
CVE-2020-7825
A vulnerability exists that could allow the execution of operating...
High 8.8

Affected Vendor

Affected Software

XPLATFORM ActiveX
Vulnerable Versions:
extcommon.dll 9.2, 9.2.1, 9.2.2

Timeline

Official Publish: January 2nd, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.