CVE-2018-13101

CVE-2018-13101 is a critical privilege escalation vulnerability affecting RedSwimmer KioskSimple 1.4.7.0, specifically within the KioskSimpleService.exe WCF endpoint. This flaw allows unauthenticated attackers to gain read and write access to the Windows registry and control services, potentially leading to the execution of arbitrary code with elevated privileges. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.