Critical severity9.8NVD Advisory· Published Mar 1, 2022· Updated Jun 17, 2026

CVE-2020-12775

Description

Hicos citizen certificate client-side component does not filter special characters for command parameters in specific web URLs. An unauthenticated remote attacker can exploit this vulnerability to perform command injection attack to execute arbitrary system command, disrupt system or terminate service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

HiCOS/client-side citizen digital certificate componentllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

moica.nat.gov.tw/rac_plugin.htmlnvdPatchVendor Advisory
www.twcert.org.tw/tw/cp-132-5695-421a7-1.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000