cbcvebase.
CVE-2018-16660
published 2019-04-25

CVE-2018-16660: A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute…

PriorityP272high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
EXPLOIT
EPSS
18.57%
96.9th percentile
A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation.

Affected

3 ranges
VendorProductVersion rangeFixed in
impervasecuresphere——
impervasecuresphere——
impervasecuresphere——

Detection & IOCsextracted from sources · hover to see the quote

versionSecureSphere 13.0.0.10↗
versionSecureSphere 13.1.0.10↗
  • →Monitor the PWS (Python CGI) service on Imperva SecureSphere for anomalous OS command execution originating from CGI processes — unsanitized user-supplied command parameters are passed directly to CLI utilities. ↗
  • →Exploitation requires authenticated access (agent registration credentials in gateway mode); alert on unexpected or brute-forced agent registration attempts against SecureSphere gateway instances. ↗
  • →Target scope includes SecureSphere 13.0, 13.1, and 13.2 in both pre-ftl mode and unsealed gateway mode; ensure detection coverage spans all three minor versions and both operational modes. ↗
  • ·Exploitation is only possible with authenticated access; unauthenticated network exposure alone is insufficient — credential compromise or insider threat is a prerequisite. ↗
  • ·Gateway mode exploitation specifically requires valid agent registration credentials, adding an additional authentication barrier compared to pre-ftl mode. ↗

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.