CVE-2020-7825
Summary
| CVE | CVE-2020-7825 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-07-17 16:15:00 UTC |
| Updated | 2020-07-23 16:44:00 UTC |
| Description | A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tobesoft | Miplatform | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| KrCERT/CC - KISA 인터넷 보호나라&KrCERT | CONFIRM | www.boho.or.kr | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.