CVE-2021-26618

Tmax ToOffice arbitrary file creation vulnerability

CVSS 7.1 HIGHEPSS 1.0%CWE-20

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.1EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 fev 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Produtos afetados

TmaxSoft Co., Ltd · ToOffice

Referências

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36456