CVE-2020-26867criticalCWE-502

CVE-2020-26867: critical vulnerability in ARC Informatique PcVue

ARC Informatique PcVue Deserialization of Untrusted Data

Published · Updated

Follow this CVE+ Monitor PcVue

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 3.8%
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
ARC Informatique · PcVue
Related CVEs — ARC Informatique PcVue

In the same product, most dangerous first.

CVE-2020-26868HIGHARC Informatique PcVue Access to Critical Private Variable via Public MethodEPSS 2.2%CVE-2020-26869HIGHARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized ActorEPSS 1.7%CVE-2022-4311MEDIUMCVE-2022-4311EPSS 0.4%CVE-2022-4312MEDIUMCVE-2022-4312EPSS 0.1%