VYPR

Dewesoft

by Dewesoft

CVEs (1)

  • CVE-2018-7756CriMar 15, 2018
    risk 0.72cvss 9.8epss 0.61

    RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file…