{"containers": {"cna": {"affected": [{"platforms": ["x86, x64"], "product": "HelpuViewer.exe", "vendor": "Helpu,inc", "versions": [{"lessThanOrEqual": "2020.11.20.0", "status": "affected", "version": "2018.5.21.0", "versionType": "custom"}]}, {"platforms": ["x86, x64"], "product": "HelpuServer.exe", "vendor": "Helpu,inc", "versions": [{"lessThanOrEqual": "2020.11.20.0", "status": "affected", "version": "1.0.0.2", "versionType": "custom"}]}, {"platforms": ["x86, x64"], "product": "HelpuFTClient.dll", "vendor": "Helpu,inc", "versions": [{"status": "affected", "version": "3.0.0.0 2020.11.20.0"}]}, {"platforms": ["x86, x64"], "product": "HelpuFTServer.dll", "vendor": "Helpu,inc", "versions": [{"status": "affected", "version": "3.0.0.0 2020.11.20.0"}]}], "credits": [{"lang": "en", "value": "Thanks to Jeongun Back for reporting this vulnerability."}], "datePublic": "2021-06-23T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-120", "description": "CWE-120 Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-24T10:15:14.000Z", "orgId": "cdd7a122-0fae-4202-8d86-14efbacc2863", "shortName": "krcert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094"}, {"tags": ["x_refsource_MISC"], "url": "https://helpu.co.kr/customer/download.html"}], "source": {"discovery": "EXTERNAL"}, "title": "HelpU Overflow Vulnerability", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vuln@krcert.or.kr", "DATE_PUBLIC": "2021-06-23T05:51:00.000Z", "ID": "CVE-2020-7862", "STATE": "PUBLIC", "TITLE": "HelpU Overflow Vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HelpuViewer.exe", "version": {"version_data": [{"platform": "x86, x64", "version_affected": "<=", "version_name": "2018.5.21.0", "version_value": "2020.11.20.0"}]}}, {"product_name": "HelpuServer.exe", "version": {"version_data": [{"platform": "x86, x64", "version_affected": "<=", "version_name": "1.0.0.2", "version_value": "2020.11.20.0"}]}}, {"product_name": "HelpuFTClient.dll", "version": {"version_data": [{"platform": "x86, x64", "version_name": "3.0.0.0", "version_value": "2020.11.20.0"}]}}, {"product_name": "HelpuFTServer.dll", "version": {"version_data": [{"platform": "x86, x64", "version_name": "3.0.0.0", "version_value": "2020.11.20.0"}]}}]}, "vendor_name": "Helpu,inc"}]}}, "credit": [{"lang": "eng", "value": "Thanks to Jeongun Back for reporting this vulnerability."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-20 Improper Input Validation"}]}, {"description": [{"lang": "eng", "value": "CWE-120 Buffer Overflow"}]}]}, "references": {"reference_data": [{"name": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094", "refsource": "MISC", "url": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094"}, {"name": "https://helpu.co.kr/customer/download.html", "refsource": "MISC", "url": "https://helpu.co.kr/customer/download.html"}]}, "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T09:41:01.877Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://helpu.co.kr/customer/download.html"}]}]}, "cveMetadata": {"assignerOrgId": "cdd7a122-0fae-4202-8d86-14efbacc2863", "assignerShortName": "krcert", "cveId": "CVE-2020-7862", "datePublished": "2021-06-24T10:15:14.096Z", "dateReserved": "2020-01-22T00:00:00.000Z", "dateUpdated": "2024-09-16T23:06:17.535Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:helpu:helpuftclient:3.0.0.0:*:*:*:*:windows:*:*", "matchCriteriaId": "D65D63E5-9478-4CB5-ABEC-58A6AB4D8241", "vulnerable": true}, {"criteria": "cpe:2.3:a:helpu:helpuftserver:3.0.0.0:*:*:*:*:windows:*:*", "matchCriteriaId": "51FCBC1B-E6C0-481A-AA65-4F6A14C5E5ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:helpu:helpuserver:1.0.0.2:*:*:*:*:windows:*:*", "matchCriteriaId": "2F92BEDB-C1B4-4FD4-8540-A5090EF64F52", "vulnerable": true}, {"criteria": "cpe:2.3:a:helpu:helpuviewer:2018.5.21.0:*:*:*:*:windows:*:*", "matchCriteriaId": "6DA81C9C-27A9-4BA9-AECD-8BFDCA46C13D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process."}, {"lang": "es", "value": "Una vulnerabilidad soluci\u00f3n de control remoto en el programa agente de HelpU, podr\u00eda permitir a un atacante remoto autenticado ejecutar comandos arbitrarios. Esta vulnerabilidad es debido a un saneamiento insuficiente de la entrada cuando se comunica el proceso del cliente"}], "id": "CVE-2020-7862", "lastModified": "2024-11-21T05:37:56.020", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "vuln@krcert.or.kr", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-06-24T11:15:07.740", "references": [{"source": "vuln@krcert.or.kr", "tags": ["Vendor Advisory"], "url": "https://helpu.co.kr/customer/download.html"}, {"source": "vuln@krcert.or.kr", "tags": ["Third Party Advisory"], "url": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://helpu.co.kr/customer/download.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094"}], "sourceIdentifier": "vuln@krcert.or.kr", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-120"}], "source": "vuln@krcert.or.kr", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}