Remote code execution

2020-05-0613:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%

JSON

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

CPENameOperatorVersion
xplatformle9.2.2.250

CPE	Name	Operator	Version
	xplatform	le	9.2.2.250

References

support.tobesoft.co.kr/Support/index.html

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35359