Lucene search

KrcertCVELIST:CVE-2020-7820

HistoryJul 02, 2020 - 12:40 p.m.

CVE-2020-7820 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

2020-07-0212:40:28

CWE-20

krcert

www.cve.org

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC

CNA Affected

[
  {
    "platforms": [
      "Windows OS"
    ],
    "product": "NEXACRO14/17 ExCommonApiV13",
    "vendor": "Tobesoft",
    "versions": [
      {
        "lessThan": "2019.9.6",
        "status": "affected",
        "version": "2019.9.6",
        "versionType": "custom"
      }
    ]
  }
]

References

support.tobesoft.co.kr/Support/index.html

www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.2%

JSON

Related for CVELIST:CVE-2020-7820