CVE-2018-14581

HIGH 7.8CVE-2018-14581 · Published 31/07/2018 · updated 17/06/2026

In short

CVE-2018-14581 is a HIGH (CVSS 7.8) vulnerability affecting .net reflector (red-gate), smartassembly (red-gate).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.0% of all vulnerabilities.
Fix: update to 10.0.7.774, 6.12.5 or later.

Package	Affected versions	Patched versions
.net reflector red-gate	`< 10.0.7.774`	`10.0.7.774`
smartassembly red-gate	`< 6.12.5`	`6.12.5`

Description

Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded resource file.

References

documentation.red-gate.com/ref10/release-notes-and-other-versions/net-reflector-10-0-release-notes · Release Notes
documentation.red-gate.com/sa6/release-notes-and-other-versions/smartassembly-6-12-release-notes · Release Notes
nccgroup.trust/us/our-research/technical-advisory-code-execution-by-viewing-resource-files-in-.net-reflector · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free