CVE-2020-7821

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 1.6%CWE-20

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Tobesoft · NEXACRO14/17 ExCommonApiV13

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://support.tobesoft.co.kr/Support/index.html https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491