← back
CVE-2020-7867

Helpu arbitrary file creation vulnerability

CVSS 8 HIGHEPSS 0.8%CWE-20
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
HelpU · HelpuViewer.exe

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →