7.8
High
CVE-2020-4545 IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper…
Description
IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By persuading a victim to open a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183190.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Connect | 3.9.9 | No fix stated |
Other CVEs of Aspera Connect
The 5 CVEs of Aspera Connect →
CVE-2026-120115
Multiple vulnerabilities in IBM Aspera Connect
6.3
Medium
CVE-2026-120113
Multiple vulnerabilities in IBM Aspera Connect
6.4
Medium
CVE-2023-27285
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds…
8.4
High
CVE-2023-22862
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method…
5.9
Medium