Critical severity · published Feb 7, 2018
CVE-2018-6823
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute…
9.8
CVSS
1.5%
EPSS
No
On KEV
Description
In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Shimo · Mailbutler
before 4.1.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-6823
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-6823
Third Party Advisory
https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md
More from Shimo
9.8
CVE-2023-30328
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use