CVE-2020-7867: Helpu arbitrary file creation vulnerability

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-27 · updated 2026-06-17
Weakness: CWE-20

Description

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

Affected products

HelpuViewer.exe: 2018.5.21.0

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36303
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36303

Get alerted when CVE-2020-7867 or the next vulnerability affects your stack