CVE-2020-7838

CVSS 8.8 HIGHEPSS 1.2%CWE-20

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 dic 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Smilegate · STOVE Client

Referencias

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851