CVE-2018-10604

8.8 highEPSS 1.6%

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2018-07-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

selinc:sel_compass

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02
https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02

Check your stack JSON