VULNERABILITY INTELLIGENCE

CVE-2020-7812

CVSS score7.8 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2020-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC.

Weakness classification

  • vuln@krcert.or.kr: CWE-494
  • nvd@nist.gov: CWE-494

Primary references