CVEvulnerability
CVE-2020-26867
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-10-12
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-502
Description
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.
Affected configurations
• arcinfo pcvue (>= 8.10 < 12.0.17)
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness
References
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-015-remote-code-execution-in-arc-informatique-pcvue/ Broken Link
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://www.pcvuesolutions.com/security Vendor Advisory
- https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 Permissions Required, Vendor Advisory
- https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-015-remote-code-execution-in-arc-informatique-pcvue/ Broken Link
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 Third Party Advisory, US Government Resource
- https://www.pcvuesolutions.com/security Vendor Advisory
- https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 Permissions Required, Vendor Advisory