CVE-2018-7602(debian / debian_linux)

LOWCVSS 9.8 · CRITICALCISA KEV

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

0.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-04. Apply updates per vendor instructions.

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • drupal

Affected systems

Products
debian_linuxdrupal

3 versions affected across 2 products

Deep dive

Full discourse1 post
  • ♫Why♥Not♪@Python_s_

    NØØT Ransomware Watch Classification: Critical CVE: CVE-2018-7602 Product: Drupal / Drupal Core Summary: VulnCheck reports real-world exploitation activity affecting Drupal / Drupal Core. Evidence: Public PoC/exploit available; Ransomware use confirmed; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability is associated with ransomware activity and may contribute to compromise of exposed systems. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 19 Jul 2018 Source: https://vulncheck.com/xdb/352de7a463fa #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Drupal_Core #CVE_2018_7602 #ActiveExploitation #Exploit #Ransomware

    0000027
    230 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux7.0--
OSdebiandebian_linux8.0--
OSdebiandebian_linux9.0--
Appdrupaldrupal---

Explore more