CVE-2020-7820CWE-20

Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

High · published July 2, 2020

CVSS v3.1
7.8
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01610 · 75.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-07-02T12:40Z
EPSS history
Timeline
  • 02 JUL 12:40Z
    Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability
    cvelistv5