CVE-2020-7878

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is due to missing support for integrity check.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-353 CWE-345

Affected software

Vendor	Product	Versions
4NB	VideoOffice	>= X2.9, < X2.10

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36349Third Party Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36349Third Party Advisory

Timeline

Published: Dec 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-78799.8This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME I CVE-2020-78808.8The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download CVE-2020-78818.8The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A CVE-2020-78829.1Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It CVE-2020-78839.8Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote fil CVE-2020-79047.4In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.CVE-2020-79057.5Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.CVE-2020-79067.5In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was CVE-2020-79077.5In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.CVE-2020-79084.3In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.CVE-2020-79097.5In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.CVE-2020-79105.4JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role.