PT-2023-11763 · Unknown · Foldingathome Client Advanced Control Gui

Published 2023-08-11 · Updated 2023-08-21 · CVE-2020-27544

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FoldingAtHome Client Advanced Control GUI versions before commit 9b619ae64443997948a36dda01b420578de1af77

Description An issue in the FoldingAtHome Client Advanced Control GUI allows remote attackers to execute arbitrary code via a crafted payload to the parse message function in the Connection.py file.

Recommendations For versions before commit 9b619ae64443997948a36dda01b420578de1af77, consider disabling the parse message function in the Connection.py file as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2020-27544

Affected Products

Foldingathome Client Advanced Control Gui

References · 6

• https://github.com/FoldingAtHome/fah-control/commit/9b619ae64443997948a36dda01b420578de1af77 · Patch
• https://osv.dev/vulnerability/CVE-2020-27544 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27544 · Security Note
• https://t.me/cvenotify/56264 · Telegram Post
• https://twitter.com/geekphane/status/1693859795986477367 · Twitter Post
• https://twitter.com/CVEnew/status/1690264158275612673 · Twitter Post