Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2018-16156

CVE-2018-16156HIGH

n/a n/a — In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated me…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0256   84.8     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Aug 29  Reserved by mitre
  May 17  Published (CNA: mitre)
  Oct 8   ENRICHED — CVE-2018-16156. Received CVSS 7.8 and CPE data from NVD.
  Oct 8   EXPLOIT PUBLISHED — CVE-2018-16156. Public exploit reference added.

CWE-426 · CNA: mitre · CVSS v3.1 · 2 references · NVD status: Modified

Description

In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
August 29, 2018	Reserved	Reserved by mitre
May 17, 2019	Published	Published (CNA: mitre)
October 8, 2026	ENRICHED	ENRICHED — CVE-2018-16156. Received CVSS 7.8 and CPE data from NVD.
October 8, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2018-16156. Public exploit reference added.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
n/a	n/a	—	n/a	—

Weaknesses

CWE-426

References (2)

http://packetstormsecurity.com/files/160832/PaperStream-IP-TWAIN-1.42.0.5685-Local-Privilege-Escalation.html [Exploit, Third Party Advisory, VDB Entry]
https://www.securifera.com/advisories/cve-2018-16156/ [Third Party Advisory]

Authoritative record: CVE-2018-16156 at cve.org

Weaknesses: CWE-426

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2018-16156 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.