CVE-2018-7259 describes a critical vulnerability in the Flight Sim Labs A320-X installer (version 2.0.1.231 for FSX / P3Dv4). This flaw allowed the installer to transmit users' Google account credentials in cleartext to a remote server if a pirated serial number was entered. The vulnerability has a CVSS score of 9.8 (Critical), indicating a high-impact threat with an easily exploitable network attack vector and no user interaction required, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability garnered significant community discussion, and the issue was addressed in installer version 2.0.1.232.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.1.231CPE matchmatch criteria | cpe:2.3:a:flightsimlabs:a320-x:2.0.1.231:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.