title: Helpu remote code execution vulnerability
description: A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login.
problem types: CWE-141 Improper Neutralization of Parameter/Argument Delimiters
affected:
{
platforms: Windows
product: helpu.ocx
vendor: HelpU
versions:
lessThanOrEqual: 2020.06.27, status: affected, version: 2020.6.27.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.6
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
version: 3.1
]