{"cvss":0.0,"datePublished":"2022-03-25","dateUpdated":"2022-03-25","description":"smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.","dueDate":"2022-04-15","id":"CVE-2020-7247","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-7247","product":"OpenSMTPD","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"OpenSMTPD Remote Code Execution Vulnerability","vendor":"OpenBSD"}