high8.0
CVE-2020-7846
Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key.
Impact
Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cnesty | Helpcom | before 10.0 |