Skip to content
OpenAdvisories
High · 8.8 CVE-2020-7825 EUVD-2020-28757GHSA-28cw-3j6f-3fv3

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An…

Published Jul 17, 2020 · Updated Sep 17, 2024 · Assigned by krcert

Vendor: Tobesoft Product: MiPlatform 320, 320U, 330, 330U

Description

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform.

Affected products

VendorProductAffectedFixed
TOBESOFT MiPlatform 320, 320U, 330, 330U 2019.05.16 and earlier versions —

References