CVE-2020-7820

CRITICO 9.8CVE-2020-7820 · Published 02/07/2020 · updated 17/06/2026

In breve

CVE-2020-7820 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda nexacro 14 (nexaweb), nexacro 17 (nexaweb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 76.0% delle vulnerabilità.
Correzione: aggiornare a 2019.9.6 o successiva.

Package	Affected versions	Patched versions
nexacro 14 nexaweb	`< 2019.9.6`	`2019.9.6`
nexacro 17 nexaweb	`< 2019.9.6`	`2019.9.6`

Description

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC

References

support.tobesoft.co.kr/Support/index.html · Third Party Advisory
krcert.or.kr/krcert/secNoticeView.do · Third Party Advisory

Altre vulnerabilità di nexacro 14

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free