CVE-2020-7861CWE-23

AnySupport directory traversing vulnerability

High · published April 22, 2021

CVSS v3.1
8.4
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01453 · 73.2th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2021-04-22T17:33Z
EPSS history
Timeline
  • 22 APR 17:33Z
    AnySupport directory traversing vulnerability
    cvelistv5