PT-2023-11763 · Unknown · Foldingathome Client Advanced Control Gui

Publicado 2023-08-11 · Atualizado 2023-08-21 · CVE-2020-27544

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoldingAtHome Client Advanced Control GUI versions before commit 9b619ae64443997948a36dda01b420578de1af77

Description An issue in the FoldingAtHome Client Advanced Control GUI allows remote attackers to execute arbitrary code via a crafted payload to the parse message function in the Connection.py file.

Recommendations For versions before commit 9b619ae64443997948a36dda01b420578de1af77, consider disabling the parse message function in the Connection.py file as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2020-27544

Produtos afetados

Foldingathome Client Advanced Control Gui

Referências · 6

• https://github.com/FoldingAtHome/fah-control/commit/9b619ae64443997948a36dda01b420578de1af77 · Correção
• https://osv.dev/vulnerability/CVE-2020-27544 · Aviso do Fabricante
• https://t.me/cvenotify/56264 · Publicação no Telegram
• https://twitter.com/geekphane/status/1693859795986477367 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1690264158275612673 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2020-27544 · Nota de Segurança