PT-2021-12683 · Helpu · Helpu

Jeongun Back · Published 2021-06-24 · Updated 2022-09-20 · CVE-2020-7862

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HelpU remote control solution (affected versions not specified)

Description: A vulnerability in the agent program of the HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands. This issue is due to insufficient input sanitization when communicating with the customer process.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

RCE

Weakness Enumeration

CWE-120

CWE-20

Related Identifiers

CVE-2020-7862

Affected Products

Helpu

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-7862 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7862 · Vendor Advisory
• https://helpu.co.kr/customer/download.html · Vendor Advisory
• https://t.me/cvenotify/36536 · Telegram Post
• https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094 · Note