What is the CVSS score of CVE-2018-5235?

CVE-2018-5235 has a CVSS 3.0 base score of 6.0 (Medium). CVSS vector: CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Norton Utilities CVE-2018-5235

MEDIUM

Uncontrolled Search Path Element (CWE-427)

2018-08-22 secure@symantec.com

Information Disclosure Norton Utilities

6.0

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Physical

Attack Complexity

High

Privileges Required

High

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 22, 2018 - 17:29 nvd

MEDIUM 6.0

DescriptionNVD

Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-427. Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. Affected products include: Symantec Norton Utilities. Version information: prior to 16.0.3.44.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.