PT-2023-11763

CVE-2020-27544

·

Published

2023-08-11

·

Updated

2023-08-21

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FoldingAtHome Client Advanced Control GUI versions before commit 9b619ae64443997948a36dda01b420578de1af77
Description An issue in the FoldingAtHome Client Advanced Control GUI allows remote attackers to execute arbitrary code via a crafted payload to the parse message function in the Connection.py file.
Recommendations For versions before commit 9b619ae64443997948a36dda01b420578de1af77, consider disabling the parse message function in the Connection.py file as a temporary workaround until a patch is available.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2020-27544
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com