CVE-2020-7810: HandySoft ActiveX File Download and Execution Vulnerability
hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacker could induce a user to crafted web page, causing damage such as malicious code infection.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-7810?
CVE-2020-7810 is a vulnerability in the hslogin2.dll ActiveX Control in Groupware that allows remote files to be downloaded and executed.
How does CVE-2020-7810 impact Handysoft Hslogin2.dll?
CVE-2020-7810 affects versions 6.7.8.4 to 7.3.4 of Handysoft Hslogin2.dll, allowing remote files to be downloaded and executed by setting the arguments to the ActiveX method.
What is the severity rating of CVE-2020-7810?
CVE-2020-7810 has a severity rating of 8.8 (high).
How can I fix CVE-2020-7810 vulnerability?
To fix the CVE-2020-7810 vulnerability, it is recommended to update to a version of Handysoft Hslogin2.dll that is not vulnerable or apply any patches or security updates provided by the vendor.
Are there any references for CVE-2020-7810?
Yes, you can find more information about CVE-2020-7810 at the following references: [Handysoft](http://www.handysoft.co.kr/en/) and [KRCERT](https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35551).