PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated…
Priority LOW 31Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified vectors.
Why it matters now
EPSS 0.01311 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OMRON SOCIAL SOLUTIONS CO., Ltd. | PowerAct Pro Master Agent for Windows | up to 5.13 | — | No fix listed | CNA |
- PowerAct Pro Master Agent for Windows VendorOMRON SOCIAL SOLUTIONS CO., Ltd. Affected up to 5.13 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:omron:poweract_pro_master_agent:*:*:*:*:*:windows:*:* | up to 5.13 | Vulnerable | OMRON Corporation |
- cpe:2.3:a:omron:poweract_pro_master_agent:*:*:*:*:*:windows:*:* Versions up to 5.13 Vulnerable ·OMRON Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-16207
- 2026-10-03 Alias added: GHSA-wvqh-764v-vx55
References
More OMRON SOCIAL SOLUTIONS CO., Ltd. vulnerabilities
- TI-2026-04724 Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application CVSS 3.1HIGH 7.8
- TI-2025-09007 Vulnerability caused by unquoted file paths of Windows services registered by the… CVSS 3.1MEDIUM 6.7
Sources
- CVE-2018-16207 · CVE Program
- CVE-2018-16207 · NVD
- FIRST EPSS
- GHSA-wvqh-764v-vx55 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences