CVE-2020-7825 HIGH

CVE-2020-7825

Vendor Tobesoft
Product MiPlatform 320, 320U, 330, 330U
Weakness CWE-78
Published July 17, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform.

Key dates

02Disclosure timeline

July 17, 2020 CVE published
September 17, 2024 Record updated