CVE-2020-7825: Tobesoft Miplatform

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending parameters to WinExec function in ExtCommandApi.dll module of MiPlatform.

Affected products

• Tobesoft Miplatform: up to and including 2019.05.16

Published 2020-07-17. Last modified 2026-06-17.