CVE-2020-7838CWE-20

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value

High · published December 18, 2020

CVSS v3.1
8.8
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01250 · 69.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-12-18T00:04Z
EPSS history
Timeline
  • 18 DEC 00:04Z
    A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value
    cvelistv5