by Kastro
Paper/Archive/CVE-2020-7361

CVE-2020-7361

EasyCorp ZenTao Pro — ZenTao Pro Command Injection

EPSS 17%CVSS 9.6
critical.is priorityof 100
48
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 97.1.971 × 2019.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path', and those commands will run in an elevated SYSTEM context on the underlying Windows operating system.

Affected

ProductAffectedFixed inSource
ZenTao Pro8.8.2 – 8.8.2–CNA

Scores by source

rapid7 (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References

refgithub.com/rapid7/metasploit-framework/pull/13828