CVE-2020-7821
Last modified
CVE-2020-7821 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC. EPSS estimates a 1.61% chance of exploitation in the next 30 days.
Description
Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nexaweb | Nexacro 14 | < 2019.9.6 |
| Nexaweb | Nexacro 17 | < 2019.9.6 |
References
- http://support.tobesoft.co.kr/Support/index.htmlThird Party Advisory
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491Third Party Advisory
- http://support.tobesoft.co.kr/Support/index.htmlThird Party Advisory
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35491Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-7821?
How severe is CVE-2020-7821?
How do I fix CVE-2020-7821?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-7815XPLATFORM v9.2.260 and eariler versions contain a vulnerabil…9.8
- CVE-2020-7816A vulnerability in the JPEG image parsing module in DaView I…7.8
- CVE-2020-7817MyBrowserPlus downloads the files needed to run the program …7.8
- CVE-2020-7818DaviewIndy 8.98.9 and earlier has a Heap-based overflow vuln…7.8
- CVE-2020-7819A SQL-Injection vulnerability in the nTracker USB Enterprise…7.5
- CVE-2020-7820Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version …9.8
- CVE-2020-7822DaviewIndy has a Heap-based overflow vulnerability, triggere…7.8
- CVE-2020-7823DaviewIndy has a Memory corruption vulnerability, triggered …7.8
- CVE-2020-7824A vulnerability in the web-based management interface of iPE…6.5
- CVE-2020-7825A vulnerability exists that could allow the execution of ope…9.8
- CVE-2020-7826EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions …9.8
- CVE-2020-7827DaviewIndy 8.98.7 and earlier version contain Use-After-Free…7.8
Are you affected by CVE-2020-7821?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST