CVE-2018-13013

HIGH

SafenSoft Enterprise Suite, SysWatch, and TPSecure < 4.4.9 - Local Code-Signing Bypass via MSI File Forgery

Title source: llm
STIX 2.1

Description

Improper check of unusual conditions when launching msiexec.exe in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.9 allows the local attacker to bypass a code-signing protection mechanism and install/execute an unauthorized program by modifying the system configuration and installing a forged MSI file. (The intended behavior is that the component SysWatch does not allow installation of MSI files unless they are signed by a limited list of certificates.)

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 8.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-754
Status published
Products (3)
safensoft/enterprise_suite < 4.4.9
safensoft/syswatch < 4.4.9
safensoft/tpsecure < 4.4.9
Published Jun 29, 2018
Tracked Since Feb 18, 2026