CVE-2020-7869

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 29, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-78707.2A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validati CVE-2020-78719.8A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficie CVE-2020-78727.8DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that CVE-2020-78739.8Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary f CVE-2020-78748.8Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to caus CVE-2020-78758.8DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file b CVE-2020-78778.8A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a c CVE-2020-78789.8An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is CVE-2020-78799.8This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME I CVE-2020-78808.8The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download CVE-2020-78818.8The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A CVE-2020-78829.1Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It