High severity7.8NVD Advisory· Published Jul 2, 2020· Updated Jun 17, 2026

CVE-2020-7821

Description

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC

Affected products

Nexaweb/Nexacro 14
cpe:2.3:a:nexaweb:nexacro_14:*:*:*:*:*:*:*:*
Range: <2019.9.6
Nexaweb/Nexacro 17
cpe:2.3:a:nexaweb:nexacro_17:*:*:*:*:*:*:*:*
Range: <2019.9.6
Nexacro/Nexacrollm-fuzzy
Range: <=2019.9.6
Tobesoft/Nexacro14/17 ExtCommonApiV13 Librarycpe-rescue
Range: 2019.9.6

Patches

Vulnerability mechanics

References

support.tobesoft.co.kr/Support/index.htmlnvdThird Party Advisory
www.krcert.or.kr/krcert/secNoticeView.donvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000