CVE-2020-7850

Katalog CVE

CVSS 7.8 · High EPSS 0,77%

Kerentanan Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') pada douzone nbbdownloader.ocx. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Rincian

Terbit di NVD

29 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://help.neobizbox.com/ advisory vendor
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35982 not applicable · advisory pihak ketiga