CVE-2020-7812
Last modified
CVE-2020-7812 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC.. EPSS estimates a 0.75% chance of exploitation in the next 30 days.
Description
Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kaoni | Ezhttptrans | <= 1.0.0.70 |
References
- http://www.kaoni.com/Vendor Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428Third Party Advisory
- http://www.kaoni.com/Vendor Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-7812?
How severe is CVE-2020-7812?
How do I fix CVE-2020-7812?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-7806Tobesoft Xplatform 9.2.2.250 and earlier version have an arb…9.8
- CVE-2020-7807A vulnerability that can hijack a DLL file that is loaded du…5.5
- CVE-2020-7808In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update…9.8
- CVE-2020-7809ALSong 3.46 and earlier version contain a Document Object Mo…6.1
- CVE-2020-7810hslogin2.dll ActiveX Control in Groupware contains a vulnera…8.8
- CVE-2020-7811Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that a…7.8
- CVE-2020-7813Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.7…9.8
- CVE-2020-7814RAONWIZ v2018.0.2.50 and eariler versions contains a vulnera…9.8
- CVE-2020-7815XPLATFORM v9.2.260 and eariler versions contain a vulnerabil…9.8
- CVE-2020-7816A vulnerability in the JPEG image parsing module in DaView I…7.8
- CVE-2020-7817MyBrowserPlus downloads the files needed to run the program …7.8
- CVE-2020-7818DaviewIndy 8.98.9 and earlier has a Heap-based overflow vuln…7.8
Are you affected by CVE-2020-7812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST