Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-9751 Details

Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.1 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cve.naver.com/detail/cve-2020-9751	CVE	Vendor Advisory
https://cve.naver.com/detail/cve-2020-9751	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-494	Download of Code Without Integrity Check	[email protected]
CWE-494	Download of Code Without Integrity Check	[email protected]

Product	Versions
naver cloud explorer	< 2.2.2.11
CPE cpe:2.3:a:naver:cloud_explorer:::::::: Remediation No remediation found in references.

4 change records found show changes

QUICK INFO