Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7851 EUVD-2020-28783GHSA-6p32-qj2r-mrw2

Innorix File Transfer Solution File Download and Execution Vulnerability

Published Apr 19, 2021 · Updated Sep 17, 2024 · Assigned by krcert

Description

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

VendorProductAffectedFixed
INNORIX INNORIX Agent.exe 9.2.18.390 – ≤ 9.2.18.382 —

References