CVE-2018-8256

Description

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, Windows Server 2008 R2, Windows Server 2019, Windows 7, Windows Server 2012 R2, PowerShell Core 6.1, Windows 10 Servers, Windows 10, Windows 8.1.

Related CPE's

omicrosoftwindows_server_2008r2sp1****x64*

omicrosoftwindows_server_2012r2*******

omicrosoftwindows_server_2008r2sp1****itanium*

omicrosoftwindows_101607*******

omicrosoftwindows_8.1-*******

omicrosoftwindows_server_2016-*******

omicrosoftwindows_7-sp1******

omicrosoftwindows_rt_8.1-*******

omicrosoftwindows_101703*******

omicrosoftwindows_server_2012-*******

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8256

PatchVendor Advisory

1042108

VDB EntryThird Party Advisory

105781

Third Party AdvisoryVDB Entry

CvssV3 impact

BaseSeverity

HIGH

ConfidentialityImpact

HIGH

AttackComplexity

LOW

Scope

UNCHANGED

AttackVector

NETWORK

AvailabilityImpact

HIGH

IntegrityImpact

HIGH

PrivilegesRequired

NONE

BaseScore

8.8

VectorString

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version

3.0

UserInteraction

REQUIRED

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:M/Au:N/C:C/I:C/A:C

AccessVector

NETWORK

AccessComplexity

MEDIUM

Authentication

NONE

ConfidentialityImpact

COMPLETE

IntegrityImpact

COMPLETE

AvailabilityImpact

COMPLETE

BaseScore

9.300000190734863

Created by Yello
About Severity.io