CVE-2020-26867

Katalog CVE

CVSS 9.8 · Critical EPSS 3,8%

Kerentanan Deserialization of Untrusted Data pada arcinfo pcvue. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

Rincian

Terbit di NVD

12 Oktober 2020

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

3,8% peluang dieksploitasi; lebih tinggi dari 89,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.pcvuesolutions.com/security advisory vendor
• https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 permissions required · advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 advisory pihak ketiga · pemerintah AS
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-015-remote-code-execution-in-... broken link