CVE-2018-13013

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-29 · updated 2026-06-17
Weakness: CWE-754

Description

Improper check of unusual conditions when launching msiexec.exe in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.9 allows the local attacker to bypass a code-signing protection mechanism and install/execute an unauthorized program by modifying the system configuration and installing a forged MSI file. (The intended behavior is that the component SysWatch does not allow installation of MSI files unless they are signed by a limited list of certificates.)

Affected products

Safensoft Enterprise Suite: before 4.4.9 — fixed in 4.4.9
Safensoft Syswatch: before 4.4.9 — fixed in 4.4.9
Safensoft Tpsecure: before 4.4.9 — fixed in 4.4.9

How to fix

Upgrade to a fixed version: Safensoft Enterprise Suite 4.4.9; Safensoft Syswatch 4.4.9; Safensoft Tpsecure 4.4.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-13013 or the next vulnerability affects your stack