CVE-2018-25359
Splinterware System Scheduler Pro 5.12 Privilege Escalation
CVSS Score
8.4
EPSS Score
0.0%
EPSS Percentile
0th
Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable files. Attackers can rename the WService.exe file in the installation directory and replace it with a malicious executable that executes with LocalSystem privileges when the service is triggered.
| CWE | CWE-276 |
| Vendor | splinterware |
| Product | splinterware system scheduler pro |
| Published | May 25, 2026 |
| Last Updated | May 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for splinterware splinterware system scheduler pro
Be the first to know when new high vulnerabilities affecting splinterware splinterware system scheduler pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Splinterware / Splinterware System Scheduler Pro
5.12
References
Credits
bzyo