Vulnerabilities > CVE-2018-18603 - Unspecified vulnerability in 360Totalsecurity 360 Total Security 3.5.0.1033
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.system("PowerShell"), within a .py file. NOTE: the vendor's position is that this cannot be categorized as a vulnerability, although it is a security-related issue
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |