evo vulnerabilities and fixes

Recent CVEs affecting evo, with upgrade or downgrade steps. 2 tracked.

evo has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-23. Highest priority: CVE-2018-15808 (score 60/100).

• CVE-2018-15808 CRITICAL 9.8 DOWNGRADE POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user
• CVE-2018-15807 HIGH 7.8 DOWNGRADE POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed throu

FAQ

How do I fix evo vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is evo being exploited right now?

None of the tracked evo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which evo CVE should I patch first?

CVE-2018-15808 currently ranks highest (60/100): POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user.

← Back to latest CVEs