CVE-2018-5202

HIGH 7.8CVE-2018-5202 · Published 21/12/2018 · updated 17/06/2026

In short

CVE-2018-5202 is a HIGH (CVSS 7.8) vulnerability affecting skcertservice (signkorea).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
skcertservice signkorea	`≤ 2.5.5`	No fix yet

Description

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.

References

boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free