PT-2021-12700

CVE-2020-7880

·

Published

2021-11-30

·

Updated

2021-12-01

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: ActiveX module related to NeoRS remote support program (affected versions not specified)
Description: The issue allows a remote attacker to download and execute a remote file due to improper parameter validation of the StartNeoRS function in the ActiveX module. This is related to the NeoRS remote support program.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2020-7880
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com