CVE coverage
View on NVD →
CVE-2018-11138
CVSS 9.8
Actively exploited (KEV)
4 detections found
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET EXPLOIT Dell KACE Attempted Remote Command Injection Outbound | rev 5 | 2024-04-13 |
| suricata | ET EXPLOIT Dell KACE Attempted Remote Command Injection Inbound | rev 5 | 2024-04-13 |
| snort | ET EXPLOIT Dell KACE Attempted Remote Command Injection Outbound | rev 3 | 2019-06-18 |
| snort | ET EXPLOIT Dell KACE Attempted Remote Command Injection Inbound | rev 3 | 2019-06-18 |