Critical severity9.8NVD Advisory· Published Mar 15, 2018· Updated Jun 17, 2026

CVE-2018-7756

Description

RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary external URL, or a "SETFIREWALL Off" command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dewesoft/Dewesoft
cpe:2.3:o:dewesoft:dewesoft:x3:sp1:*:*:*:*:*:*
ROADCAM/X3llm-fuzzy
Range: SP1

Patches

Vulnerability mechanics

References

hyp3rlinx.altervista.org/advisories/DEWESOFT-X3-REMOTE-INTERNAL-COMMAND-ACCESS.txtnvdExploitThird Party Advisory
www.exploit-db.com/exploits/44275/nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.049
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000