Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNaver Cloud Explorer
APPNaver< 2.2.2.11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2020-9751CRITICAL9.1PL ✓same product
Naver Cloud Explorer — wykonanie dowolnego kodu przez mechanizm aktualizacji
CVE-2022-24077HIGH7.8same product
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL ...
CVE-2019-13156HIGH7.5same product
NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a...
CVE-2025-49223CRITICAL9.8PL ✓same vendor
Prototype pollution w billboard.js umożliwia RCE lub DoS
CVE-2024-28211CRITICAL9.8PL ✓same vendor
Naver nGrinder — RCE przez złośliwy serwer JMX/RMI