CVE-2018-10716

MEDIUM

Shanghai 2345 Security Guard <3.7.0 - Privilege Escalation

Title source: llm

Description

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently terminate processes, because WM_CLOSE is not properly considered.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/rebol0x6c/2345_msg_poc

View Exploit ZIP pw:eip

Scores

CVSS v3 5.5

EPSS 0.0005

EPSS Percentile 14.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (1)

2345_security_guard_project/2345_security_guard 3.7

Published May 03, 2018

Tracked Since Feb 18, 2026