CVE-2020-9751

Critical

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the…

naver·CWE-494·Published 2020-03-03

CVSS

9.1

EPSS

0.00

KEV

Exploits

cve.orgen

146 chars

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.

NVDen

146 chars

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.

Naver Cloud Explorer versiones anteriores a 2.2.2.11, permite al sistema descargar un archivo arbitrario desde el servidor del atacante y ejecutarlo durante la actualización.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N