Skip to content
OpenAdvisories
High · 8.4 CVE-2020-7861 EUVD-2020-28793GHSA-7xc7-gqfg-jwff

AnySupport directory traversing vulnerability

Published Apr 22, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution.

Affected products

VendorProductAffectedFixed
Koino AquaNPlayer 2019.3.21.0 – ≤ 2019.3.21.0 —

References