CVE-2020-7882: Hancom ANYSIGN4PC

Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')

Affected products

• Hancom ANYSIGN4PC: version 1.1.1.0 only; version 1.1.2.6 only; version 1.1.2.7 only

Published 2021-11-22. Last modified 2026-06-17.