CVE-2018-15807

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-23 · updated 2026-06-17
Weakness: CWE-330

Description

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass any POSIM EVO login prompt.

Affected products

Posim Evo: 15.13

References

https://versprite.com/advisories/posim-evo-for-windows/
https://versprite.com/advisories/posim-evo-for-windows/

Get alerted when CVE-2018-15807 or the next vulnerability affects your stack