← Back

CVE-2020-26867

nvd nist
Published: Oct 12, 2020Modified: Jul 9, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

Affected (1)

Products: Arcinfo: Pcvue
Arcinfo
1 product
Pcvue
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Pcvue
From 8.10 to 12.0.17

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (14)

Source: vulnerability@kaspersky.com
Broken Link
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: vulnerability@kaspersky.com
Vendor Advisory
Source: vulnerability@kaspersky.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory

Timeline

No history available yet.