CVE-2020-7838

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
krcertCNA
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
onstovestove
0.0.4.10 ≤
𝑥
≤ 0.0.4.71
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851