CVE-2020-35851 HIGH

CVE-2020-35851: HGiga MailSherlock - Command Injection

Vendor Hgiga

Product MailSherlock MSR45/SSR45

Weakness CWE-78

Published December 31, 2020

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

8.1/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.

Key dates

02Disclosure timeline

December 31, 2020 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-35851 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html