CVE-2018-5202

—

CVSS 3.0

7.8 high

EPSS

2%p74

Published

Dec 21, 2018 (Dec 21, 2018)

Modified

Jun 17, 2026

Description

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.

Vendors: signkorea
Products: skcertservice
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.