CVE-2018-8306
A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input, aka "Microsoft Wireless Display Adapter Command Injection Vulnerability." This…
Does this matter?
Lower severity and a low EPSS score (2.88%). Track it; it rarely justifies an emergency change on its own.
Description
A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input, aka "Microsoft Wireless Display Adapter Command Injection Vulnerability." This affects Microsoft Wireless Display Adapter V2 Software.
- CVSS 3.0
- 5.5 MEDIUMCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- EPSS
- 2.88% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-77
- Affected
- microsoft/wireless display adapter firmware
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/104621Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041269Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8306Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104621Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041269Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8306Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.