CVE-2020-7877

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Sep 7, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-78789.8An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue isCVE-2020-78799.8This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME ICVE-2020-78808.8The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download CVE-2020-78818.8The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. ACVE-2020-78829.1Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It CVE-2020-78839.8Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote filCVE-2020-79047.4In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.CVE-2020-79057.5Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.CVE-2020-79067.5In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was CVE-2020-79077.5In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.CVE-2020-79084.3In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.CVE-2020-79097.5In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.