VULNERABILITY INTELLIGENCE

CVE-2020-7838

CVSS score8.8 HIGH
EPSS probability1.25%
CISA KEVNot currently listed
Published2020-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

Weakness classification

  • vuln@krcert.or.kr: CWE-20
  • nvd@nist.gov: CWE-20

Primary references