CVE-2020-7868

Critical

A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of…

krcert·CWE-141·Published 2021-06-29

CVSS

9.8

EPSS

0.03

KEV

Exploits

cve.orgen

168 chars

A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login.

NVDen

168 chars

A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login.

Se presenta una vulnerabilidad de ejecución de código remota en helpUS (herramienta de administración remota) debido a una comprobación inapropiada del parámetro de una función ShellExecutionExA usada para iniciar sesión

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Primary	cve.org	9.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	9.6	2.8	6.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H