1. Home
  2. CVE Database
  3. CVE-2018-13789
HIGH · 7.5

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

Vulnerability Description

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DescorInfocad Fm< 3.1.0.0

Related Weaknesses (CWE)

CWE-294CWE-287CWE-522

References

FAQ

What is CVE-2018-13789?

CVE-2018-13789 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

How severe is CVE-2018-13789?

CVE-2018-13789 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-13789?

Check the references section above for vendor advisories and patch information. Affected products include: Descor Infocad Fm.