Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

60.0

Published

2021-11-22

Status

Published

Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')

Weaknesses

CWE-24

Coverage 1

threat-intel

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

A state-sponsored threat group, potentially linked to Lazarus and operating between 2025 and 2026, exploited vulnerabilities in AnySign4PC, a certificate-based electronic signature software, to install backdoors on targe…

The Hacker News · Jul 30, 2026 High

CVE-2020-7882SOwatering holebuffer overflowremote code execution

All articles mentioning it

Advisories and references

• boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36344