CVE-2020-7862HelpU Overflow Vulnerability

7.0HighCVSS base score
1.1%Exploitation in 30 daysEPSS · top 34% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process.

Timeline

2020
22 Jan 2020
22 Jan 2020
ID reserved
By krcert
2021
24 Jun 202117 months later
24 Jun 2021· 17 months later
Published
2024
16 Sept 20243 years later
16 Sept 2024· 3 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2020-7862, by who scored it
Scored by	CVSS	Score	Vector
krcertCNA (assigner)	3.1	High7.0	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified	3.1	High8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 1.1% · top 34% of all CVEs (13 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.0.

Affected products

Helpu,inc · HelpuViewer.exe
- affected 2018.5.21.0 – ≤ 2020.11.20.0
Helpu,inc · HelpuServer.exe
- affected 1.0.0.2 – ≤ 2020.11.20.0
Helpu,inc · HelpuFTClient.dll
- affected 3.0.0.0 2020.11.20.0
Helpu,inc · HelpuFTServer.dll
- affected 3.0.0.0 2020.11.20.0

References2

https://krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36094 (opens in a new tab)x_refsource_MISCx_transferred
https://helpu.co.kr/customer/download.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-7862](https://cveledger.app/badge/CVE-2020-7862.svg)](https://cveledger.app/cve/CVE-2020-7862)

Record last updated 16 Sept 2024, 23:06 UTC.