[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2zVH7s5fuHi5UssBPSBdhfY4FJNv0oX5JmG-05XtMM0":3,"g5a-risk:CVE-2018-3970":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":58,"references":59,"referencesCount":72,"weaknesses":73,"weaknessesCount":58,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":117,"notableEvents":118},"CVE-2018-3970","What is CVE-2018-3970?","An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.","An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IR...","2018-10-25T18:29:00.257","2023-02-02T13:47:37.06",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":40,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":39},"talos-cna@cisco.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",4,2.5,1.4,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":22,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00487,[49,49,49,49,49,49,49],"Medium",[53],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"sophos","hitmanpro.alert","3.7.6.744","cpe:2.3:a:sophos:hitmanpro.alert:3.7.6.744:*:*:*:*:*:*:*",1,[60,67],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105743","Securityfocus",[64,65,66],"Broken Link","Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.talosintelligence.com\u002Fvulnerability_reports\u002FTALOS-2018-0635","Talosintelligence",[71,65],"Exploit",2,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete","Base","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2018-3970? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-3970, a medium severity cyber security vulnerability from 2018. An exploitable memory disclosure vulnerability exists in t...","CVE-2018-3970, CVE-2018-3970 vulnerability, CVE-2018-3970 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, sophos security, hitmanpro.alert vulnerability","\u002Fwhat-is\u002Fcve-2018-3970",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-3970","Cybersecurity","CVE-2018-3970, CVE-2018-3970 vulnerability, CVE-2018-3970 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":27,"Negate":27,"Nodes":111},[112],{"Operator":113,"Negate":27,"CPEMatch":114},"OR",[115],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E84ED4F7-9CBE-4E15-B862-7E64A2F6922D",[],[],{"lastModified":11,"cacheTime":120,"version":43},1792338633008,{"score":122,"band":51,"action":123,"scoredAt":124},40,"Plan remediation","2026-10-16T06:45:04.94293+00:00"]