CVE-2020-7861

CRITICAL 9.8CVE-2020-7861 · Published 22/04/2021 · updated 17/06/2026

In short

CVE-2020-7861 is a CRITICAL (CVSS 9.8) vulnerability affecting anysupport (anysupport).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.6% of all vulnerabilities.
Fix: update to 2019.3.21.0 or later.

Package	Affected versions	Patched versions
anysupport anysupport	`< 2019.3.21.0`	`2019.3.21.0`

Description

AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution.

References

boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free