by Kastro
Paper/Archive/CVE-2020-7869

CVE-2020-7869

mastersoft ZOOK — An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrar…

EPSS 2%CVSS 9.0
critical.is priorityof 100
42
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 76.1.761 × 2015.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority.

Affected

ProductAffectedFixed inSource
ZOOK2.0.4.6 – 2.0.4.6–CNA

Scores by source

krcert (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refboho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36090