CVE-2020-7820

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

State: Published
Severity: 7.8 High
Published: Jul 2, 2020
Updated: Aug 4, 2024
Reserved: Jan 22, 2020

Description

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	krcert

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
NEXACRO14/17 ExCommonApiV13Tobesoft	2019.9.6 to before 2019.9.6Affected

References

http://support.tobesoft.co.kr/Support/index.html
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.