CVE-2018-15808

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-23 · updated 2026-06-17
Weakness: CWE-798

Description

POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach of confidentiality, integrity, or availability or allow for attackers to remotely execute code on associated POSIM EVO clients.

Affected products

Posim Evo: 15.13

References

https://versprite.com/advisories/posim-evo-for-windows-2/
https://versprite.com/advisories/posim-evo-for-windows-2/

Get alerted when CVE-2018-15808 or the next vulnerability affects your stack