Threat Investigation
Request a demo

CVE-2020-35851

High

Description

HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.

SeverityHigh
CVSS8.1
Exploit probability—
ProductHgiga Msr45 Isherlock-user
PublishedDec 31, 2020
First seenDec 31, 2020
Weakness typeCWE-78OS command injection

How to fix

Update
  • hgiga msr45_isherlock-user4.5-115 or later
  • hgiga ssr45_isherlock-user4.5-115 or later

Affected products

ProductAffected versionsFixed in
hgiga msr45_isherlock-userv < 4.5-1154.5-115
hgiga ssr45_isherlock-userv < 4.5-1154.5-115

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.