CVE-2020-7778

high

Description

This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.

References

Advisories
More

https://snyk.io/vuln/SNYK-JS-SYSTEMINFORMATION-1043753

https://github.com/sebhildebrandt/systeminformation/commit/73dce8d717ca9c3b7b0d0688254b8213b957f0fa%23diff-970ae648187190f86bafc8f193b7538200eba164fad0674428b6487582c089cc

https://github.com/sebhildebrandt/systeminformation/commit/11103a447ab9550c25f1fbec7e6d903720b3fea8%23diff-970ae648187190f86bafc8f193b7538200eba164fad0674428b6487582c089cc

https://github.com/advisories/GHSA-8j36-q8x7-pm6q

https://github.com/sebhildebrandt/systeminformation/blob/master/lib/internet.js

https://gist.github.com/EffectRenan/b434438938eed0b21b376cedf5c81e80

Details

Source: Mitre, NVD

Published: 2020-11-26

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L