{"id":"CVE-2018-6892","aliases":["EUVD-2018-18637","GHSA-8phr-7v4m-7r33"],"status":"published","title":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can...","description":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.93392,"percentile":0.9984,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2018-02-11T18:00:00Z","modified":"2026-06-17T02:02:25Z","exploits":[{"source":"exploitdb","id":"EDB-44027","title":"CloudMe Sync \u003c 1.11.0 - Buffer Overflow","type":"remote","platform":"windows","date":"2018-02-13","verified":true,"url":"https://www.exploit-db.com/exploits/44027"},{"source":"exploitdb","id":"EDB-44175","title":"CloudMe Sync 1.10.9 - Stack-Based Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2018-02-26","verified":true,"url":"https://www.exploit-db.com/exploits/44175"},{"source":"exploitdb","id":"EDB-45197","title":"Cloudme 1.9 - Buffer Overflow (DEP) (Metasploit)","type":"remote","platform":"windows_x86-64","date":"2018-08-14","url":"https://www.exploit-db.com/exploits/45197"},{"source":"exploitdb","id":"EDB-46250","title":"CloudMe Sync 1.11.2 Buffer Overflow - WoW64 (DEP Bypass)","type":"remote","platform":"windows_x86-64","date":"2019-01-28","url":"https://www.exploit-db.com/exploits/46250"},{"source":"metasploit","id":"exploit/windows/misc/cloudme_sync","title":"CloudMe Sync v1.10.9","type":"exploit","platform":"Windows","date":"2018-01-17","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/cloudme_sync"},{"source":"pocgithub","id":"crypticq/CLOUDME_B0F","title":"crypticq/CLOUDME_B0F","date":"2021-10-01","url":"https://github.com/crypticq/CLOUDME_B0F"},{"source":"pocgithub","id":"latortuga71/CVE-2018-6892-Golang","title":"latortuga71/CVE-2018-6892-Golang","date":"2020-07-20","url":"https://github.com/latortuga71/CVE-2018-6892-Golang"},{"source":"pocgithub","id":"manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass","title":"manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass","date":"2018-05-31","url":"https://github.com/manojcode/-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass"},{"source":"pocgithub","id":"manojcode/CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass","title":"manojcode/CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass","date":"2018-05-31","url":"https://github.com/manojcode/CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass"}],"products":[{"vendor":"cloudme","product":"sync"}],"references":[{"url":"https://www.exploit-db.com/exploits/44175/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://blogs.securiteam.com/index.php/archives/3669","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txt","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/46250/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/45197/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/44027/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/48840","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6892"},{"url":"https://github.com/advisories/GHSA-8phr-7v4m-7r33"}],"sources":{"cve":[{"id":"CVE-2018-6892","description":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.","status":"published","published":"2018-02-11T18:00:00Z","modified":"2024-08-05T06:17:16.718Z","updated_at":"2026-11-02T14:35:05.961936Z"}],"euvd":[{"id":"EUVD-2018-18637","description":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.","status":"published","published":"2018-02-11T18:00:00Z","modified":"2024-08-05T06:17:16Z","updated_at":"2026-11-03T02:40:07.110514Z"}],"ghsa":[{"id":"GHSA-8phr-7v4m-7r33","title":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can...","description":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.","status":"published","published":"2022-05-13T01:14:51Z","modified":"2023-02-01T05:04:30Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:09.90532Z"}],"nvd":[{"id":"CVE-2018-6892","description":"An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the \"CloudMe Sync\" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.","status":"published","published":"2018-02-11T18:29:00.29Z","modified":"2026-06-17T02:02:25.473Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:22.897995Z"}]}}