CVE-2021-26608
handysoft groupware arbitrary file download and execution vulnerability
- State
- Published
- Severity
- 8.8 High
- Published
- Sep 9, 2021
- Updated
- Aug 3, 2024
- Reserved
- Feb 3, 2021
Description
An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | krcert |
Weaknesses
- CWE-353 Missing Support for Integrity Check
Affected Products
| Product | Versions |
|---|---|
HShell.dllhandysoft |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.