What is CVE-2020-7880?

CVE-2020-7880 is a high-severity vulnerability in Douzone Neors, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2021-11-30.

How severe is CVE-2020-7880?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Douzone Neors

CVE-2020-7880

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.016 (73.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Douzone Neors — versions RS10
Microsoft Windows

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7880?: CVE-2020-7880 is a high-severity vulnerability in Douzone Neors, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2021-11-30.
How severe is CVE-2020-7880?: High severity. CVSS v3 base score is 7.5 out of 10.