Threat Investigation
Request a demo

CVE-2020-26867

Critical

Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

SeverityCritical
CVSS9.8
Exploit probability—
ProductArcinfo Pcvue
PublishedOct 12, 2020
First seenOct 12, 2020
Weakness typeCWE-502Deserialization of untrusted data

How to fix

Update
  • arcinfo pcvue12.0.17 or later

Affected products

ProductAffected versionsFixed in
arcinfo pcvue8.10 ≤ v < 12.0.1712.0.17

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.