What’s Vulnerable › Vulnerabilities

CVE-2020-7838

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-18 · updated 2026-06-17
• Weakness: CWE-20

Description

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

Affected products

• Smilegate STOVE Client: from 0.0.4.10 through 0.0.4.71

References

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851

Get alerted when CVE-2020-7838 or the next vulnerability affects your stack