RULE(RULE ID:330913)

Rule General Information
Release Date: 2020-08-25
Rule Name: Weaver e-cology 9.0 Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver provides mobile office, wechat office, collaborative office (OA), process management, information portal, knowledge management, cost control management and other functions, suitable for mobile phones and PCS, is one of the mainstream OA systems. There are remote code execution vulnerabilities in Weaver e-cology versions 7.0, 8.0, 8.1, 9.0. Attackers can attack vulnerable Weaver OA users through carefully constructed request packets, achieve arbitrary code execution, and then obtain the system Shell.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.