PT-2020-20736 · Naver · Naver Cloud Explorer

Jaewook Shin + 2 · Published 2020-03-03 · Updated 2020-03-04 · CVE-2020-9751

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Naver Cloud Explorer versions prior to 2.2.2.11

Description The issue allows an attacker to download and execute an arbitrary file from their server during the upgrade process.

Recommendations For versions prior to 2.2.2.11, update to version 2.2.2.11 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2020-9751

Affected Products

Naver Cloud Explorer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-9751 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9751 · Vendor Advisory
• https://cve.naver.com/detail/cve-2020-9751 · Vendor Advisory