VulnerabilityModified

CVE-2018-18817

The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API.

HIGH 7.5EPSS 1.07%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.07%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API.

CVSS 3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS: 1.07% probability · 63th percentile
CISA KEV: Not listed
Affected: leostream/agent · leostream/connection broker
Source: cve@mitre.org

References

https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-updateVendor Advisory
https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-updateVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.