VULNERABILITY INTELLIGENCE

CVE-2020-7825

CVSS score8.8 HIGH
EPSS probability2.09%
CISA KEVNot currently listed
Published2020-07-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform.

Weakness classification

  • vuln@krcert.or.kr: CWE-78
  • nvd@nist.gov: CWE-78

Primary references