CVE-2018-14009
CVE-2018-14009
No sign of exploitation. has a public proof of concept.
Vexday Risk Score
35Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Proof of concept
Public proof of concept exists, but not yet automated.
CVSS —EPSS 38.4%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
12 Jul 2018Published on NVD
23 Mar 2021Public PoC
Weaponization speed
984 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/lolameroo/Codiad-CVE-2018-14009★ 0cve_referencepacketstormsecurity.com/files/161944/Codiad-2.8.4-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49705unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.