Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-7865

Inoguard ExECM CoreB2B solution remote code execution vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Inoguard ExECM CoreB2B

  • 1.1.0.4 to ≤ 1.1.0.4affected

References