← Back

CVE-2020-7806

nvd nist
Published: May 6, 2020Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

Affected (1)

Products: Tobesoft: Xplatform
Tobesoft
1 product
Xplatform
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Xplatform
Up to 9.2.2.250
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-494
Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References (4)

Source: vuln@krcert.or.kr
Vendor Advisory
Source: vuln@krcert.or.kr
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.