CVE-2018-18253: Capmon Access Manager

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

Affected products

• Capmon Access Manager: up to and including 5.4.1.1005

Published 2019-03-15. Last modified 2026-06-17.