CVE-2020-7865 - Inoguard ExECM CoreB2B solution remote code execution vulnerability

Back Back to CVE browser

CRITICAL

Inoguard ExECM CoreB2B solution remote code execution vulnerability

Published Sep 7, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 0.95%

Description

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system.

Affected products

Vendor Inoguard Product ExECM CoreB2B Default
n/a
- Version
  1.1.0.4
  Status
  affected
  Constraints
  <=1.1.0.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Inoguard

ExECM CoreB2B

n/a

Version	Status	Constraints
1.1.0.4	affected	<=1.1.0.4

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28797
Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36229
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28797		Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36229		x_refsource_MISCThird Party Advisory