CVE-2020-7806

Tobesoft Xplatform ActiveX File Download Vulnerability

State: Published
Severity: 7.8 High
Published: May 6, 2020
Updated: Aug 4, 2024
Reserved: Jan 22, 2020

Description

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	krcert

Weaknesses

CWE-494 Download of Code Without Integrity Check

Affected Products

Product	Versions
XplatformTobesoft	9.2.2.250 through 9.2.2.260Affected

References

http://support.tobesoft.co.kr/Support/index.html
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35359

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.