CVE-2020-7831

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-24 · updated 2026-06-17
Weakness: CWE-494

Description

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.

Affected products

INOGARD Ebiz4u CViewer Object AxECM.dll: cviewer_object_1.0.5.1

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559

Get alerted when CVE-2020-7831 or the next vulnerability affects your stack