Vendors / NAVER Records 47 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 13
CVSS high 15
Exploited now NAVER records in CISA KEV No NAVER vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01149 · Published 2020-03-23 · No fix listed CWE-73
Priority MEDIUM 40
Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00485 · Published 2020-03-03 · No fix listed CWE-494
Priority LOW 35
NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01038 · Published 2019-09-03 · No fix listed CWE-121
Priority LOW 34
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00311 · Published 2022-06-13 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
13 15 17 2 0
THREATIST.IORead the docs