CVE-2020-7804: OS Command Injection
Published Apr 29, 2020
·Updated
ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.
Affected Software
4 affected components
HandySoft Groupware=1.7.3.1
Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Event History
Apr 29, 2020
CVE Published
via MITRE·02:51 PM
Data Sourced
via MITRE·02:51 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-7804?
CVE-2020-7804 is a vulnerability in ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 that allows an attacker to execute arbitrary commands via the ShellExec method.
2
What is the severity of CVE-2020-7804?
The severity of CVE-2020-7804 is high with a severity value of 7.2.
3
How can an attacker exploit CVE-2020-7804?
An attacker can exploit CVE-2020-7804 by using the ShellExec method of the ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 to execute arbitrary commands.
4
Which versions of Handy Groupware are affected by CVE-2020-7804?
Handy Groupware 1.7.3.1 is the specific version affected by CVE-2020-7804.
5
Are Microsoft Windows 7, 8, and 10 vulnerable to CVE-2020-7804?
No, Microsoft Windows 7, 8, and 10 are not vulnerable to CVE-2020-7804.