CVE-2018-9310: An issue was discovered in MagniComp SysInfo before 10-H82 if setuid root (the default).

Security readout for executives and security teams

CVE-2018-9310 is a local privilege escalation in MagniComp SysInfo before 10-H82 when installed setuid root, described as the default. A local user could use SysInfo to gain a root shell and compromise that host. This is not described as remotely exploitable, and no active exploitation is cited in the provided sources. Exposure is likely limited to Linux/UNIX hosts running MagniComp SysInfo before 10-H82 with setuid-root permissions enabled. The supplied CVE metadata lacks CPEs or structured affected-product data, so asset discovery must rely on installed software and file permission checks. Treat this as a high-priority local compromise risk, not an internet-facing emergency. Systems with multiple users or exposed shell access should be reviewed first because successful exploitation could give an ordinary local user full root control. Mitigation focus: Check vendor guidance for CVE-2018-9310 before changing production systems.; Upgrade MagniComp SysInfo to 10-H82 or later where installed.; Identify whether SysInfo is installed with setuid-root permissions..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.