CVE-2018-16156 — HIGH (7.8)

Vulnerability Description

In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Fujitsu	Paperstream Ip \(Twain\)	1.42.0.5685

Related Weaknesses (CWE)

CWE-426

References

http://packetstormsecurity.com/files/160832/PaperStream-IP-TWAIN-1.42.0.5685-LocExploitThird Party AdvisoryVDB Entry
https://www.securifera.com/advisories/cve-2018-16156/Third Party Advisory
http://packetstormsecurity.com/files/160832/PaperStream-IP-TWAIN-1.42.0.5685-LocExploitThird Party AdvisoryVDB Entry
https://www.securifera.com/advisories/cve-2018-16156/Third Party Advisory

FAQ

What is CVE-2018-16156?

CVE-2018-16156 is a vulnerability with a CVSS score of 7.8 (HIGH). In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of...

How severe is CVE-2018-16156?

CVE-2018-16156 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-16156?

Check the references section above for vendor advisories and patch information. Affected products include: Fujitsu Paperstream Ip \(Twain\).