CVE-2018-15484

—

CVSS 3.0

9.8 critical

EPSS

8%p94

Published

Sep 7, 2018 (Sep 7, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.

Vendors: kone
Products: group controller firmware
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.7%)

In the news0 stories

No ingested article mentions this CVE yet.