Cyber Posture

CVE-2018-25360

HighPublic PoC
Microsoft: not affectedMSmacOS: not affectedMacLinux: not affectedLnxMobile: not affectedMobNetwork: not affectedNetApplication: not affectedAppOther: affectedOth

Published: 25 May 2026

Published
25 May 2026
Modified
26 May 2026
KEV Added
—
Patch
—
CVSS Score 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0001 2.3th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2018-25360 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Agatasoft (inferred from references). Its CVSS base score is 8.4 (High).

Operationally, ranked at the 2.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

NVD Description

AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and…

more

jump instructions that overwrite the SEH handler pointer to achieve code execution when the file contents are pasted into the application.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-121

Affected Products

Agatasoft
—
inferred from references and description; NVD did not file a CPE for this CVE

EU & UK References

References