CVE-2020-7880CWE-20

douzone NeoRS remote support program ActiveX vulnerability

High · published November 30, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01659 · 76.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-11-30T18:47Z
EPSS history
Timeline
  • 30 NOV 18:47Z
    douzone NeoRS remote support program ActiveX vulnerability
    cvelistv5