CVE-2020-7862 — HIGH (7.0) — White Hats Nepal

Vulnerability Description

A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Helpu	Helpuftclient	3.0.0.0
Helpu	Helpuftserver	3.0.0.0
Helpu	Helpuserver	1.0.0.2
Helpu	Helpuviewer	2018.5.21.0

Related Weaknesses (CWE)

CWE-20 CWE-120

References

https://helpu.co.kr/customer/download.htmlVendor Advisory
https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094Third Party Advisory
https://helpu.co.kr/customer/download.htmlVendor Advisory
https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094Third Party Advisory

FAQ

What is CVE-2020-7862?

CVE-2020-7862 is a vulnerability with a CVSS score of 7.0 (HIGH). A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization...

How severe is CVE-2020-7862?

CVE-2020-7862 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-7862?

Check the references section above for vendor advisories and patch information. Affected products include: Helpu Helpuftclient, Helpu Helpuftserver, Helpu Helpuserver, Helpu Helpuviewer.