Aller au contenu
Se connecter
7.8 Élevée

CVE-2020-4545 IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper…

Description

IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190.

Produits et versions touchés

Produit Versions touchées Corrigé en
Aspera Connect 3.9.9 Pas de correctif indiqué

Autres CVE de Aspera Connect

Les 3 CVE de Aspera Connect →
CVE-2023-27285 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds… 8.4 Élevée CVE-2023-22862 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method… 5.9 Moyenne
Suivre cette CVE