Skip to content
OpenAdvisories
High · 8.8 CVE-2020-7865 EUVD-2020-28797GHSA-265x-jgfx-f3g8

Inoguard ExECM CoreB2B solution remote code execution vulnerability

Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system.

Affected products

VendorProductAffectedFixed
Inoguard ExECM CoreB2B 1.1.0.4 – ≤ 1.1.0.4 —

References