What’s Vulnerable › Vulnerabilities
CVE-2018-16494
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-05-26 · updated 2026-06-17
- Weakness: CWE-377
Description
In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created files and directories. Insecure umask setting was present throughout the Versa servers.
Affected products
- Versa VOS: before 16.1r2s11; from 20.2.0 before 20.2.2; from 21.1.0 before 21.1.1 — fixed in 16.1r2s11, 20.2.2, 21.1.1
How to fix
Upgrade to a fixed version: Versa VOS 16.1r2s11, 20.2.2, 21.1.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-16494 or the next vulnerability affects your stack