Sign in Free account Free scan

handysoft records

4 published records for vendor handysoft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

20
21
22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-26630No exploit	HANDY Groupware file download and execute vulnerabilityhandysoft · groupware · CWE-20 pre-auth RCE	Critical9.8	—	0.8%	May 19, 2022
39Monitor	CVE-2021-26608No exploit	handysoft groupware arbitrary file download and execution vulnerabilityhandysoft · hshell · CWE-353 Pre-auth	Critical9.8	—	0.5%	Sep 9, 2021
35Monitor	CVE-2020-7810No exploit	HandySoft ActiveX File Download and Execution Vulnerabilityhandysoft · hslogin2.dll · CWE-353 Pre-auth	High8.8	—	0.4%	Aug 7, 2020
28Monitor	CVE-2020-7804No exploit	ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the Shelhandysoft · groupware · CWE-78 RCE Command injection	High7.2	—	0.9%	Apr 29, 2020

CVE-2021-26630
39Monitor
HANDY Groupware file download and execute vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
handysoft · groupwareMay 19, 2022
CVE-2021-26608
39Monitor
handysoft groupware arbitrary file download and execution vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
handysoft · hshellSep 9, 2021
CVE-2020-7810
35Monitor
HandySoft ActiveX File Download and Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
handysoft · hslogin2.dllAug 7, 2020
CVE-2020-7804
28Monitor
ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the Shel
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
handysoft · groupwareApr 29, 2020