CVE-2020-7825

—

CVSS 3.1

9.8 critical

EPSS

2%p81

Published

Jul 17, 2020 (Jul 17, 2020)

Modified

Jun 17, 2026

Description

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform.

Vendors: tobesoft
Products: miplatform
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.