What’s Vulnerable › Vulnerabilities

CVE-2018-10959

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-17 · updated 2026-06-17
• Weakness: CWE-426

Description

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch.

Affected products

• BeyondTrust Avecto Defendpoint: from 4.0 before 4.4.267.0; from 5.0 before 5.1.149.0 — fixed in 4.4.267.0, 5.1.149.0

How to fix

Upgrade to a fixed version: BeyondTrust Avecto Defendpoint 4.4.267.0, 5.1.149.0. Check the vendor advisory for mitigations.

References

• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_4.4.267.0_SR6.pdf
• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_5.1.149.0_SR1.pdf
• https://hackandpwn.com/cve-2018-10959/
• https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-4-4-sr6.pdf
• https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-5-1.pdf
• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_4.4.267.0_SR6.pdf
• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_5.1.149.0_SR1.pdf
• https://hackandpwn.com/cve-2018-10959/
• https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-4-4-sr6.pdf
• https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-5-1.pdf

Get alerted when CVE-2018-10959 or the next vulnerability affects your stack