Skip to content
OpenAdvisories
High · 8.1 CVE-2020-25850 EUVD-2020-18483GHSA-wv77-666p-gm5q

HGiga MailSherlock - Arbitrary File Download

Published Dec 31, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.

Affected products

VendorProductAffectedFixed
HGiga MailSherlock MSR45/SSR45 unspecified – < 117 117

References