Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-7778

19
FAUCET Score

CVE-2020-7778 is a high-severity vulnerability affecting the systeminformation package prior to version 4.30.2. This flaw allows an unauthenticated attacker to overwrite object properties and functions, potentially leading to arbitrary OS command execution. With a CVSS score of 7.3, it presents a low-complexity attack vector over the network, resulting in partial loss of confidentiality, integrity, and availability. While no active exploitation or public exploit code is currently reported, and community discussion is minimal, the potential for remote code execution warrants attention.

Impacted Technologies

VendorProductVersion(s)CPE
< 4.30.2CPE matchmatch criteria
cpe:2.3:a:systeminformation:systeminformation:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

7.3HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
3.9
Impact Score
3.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.39%
Probability of exploitation in next 30 days
EPSS Percentile
82.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0239 is in the 68th percentile among its peer group of 51,551 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: systeminformationFixed in: 4.30.2

Vendor Advisories (1)

npmGHSA-8j36-q8x7-pm6qhigh

OS Command Injection in systeminformation

Feb 9, 2022

References

gist.github.com / EffectRenan/b434438938eed0b21b376cedf5c81e80
ExploitThird Party Advisory
github.com / sebhildebrandt/systeminformation/blob/master/lib/internet.js
ExploitThird Party Advisory
github.com / sebhildebrandt/systeminformation/commit/11103a447ab9550c25f1fbec7e6d903720b3fea8%23diff-970ae648187190f86bafc8f193b7538200eba164fad0674428b6487582c089cc
PatchThird Party Advisory
github.com / sebhildebrandt/systeminformation/commit/73dce8d717ca9c3b7b0d0688254b8213b957f0fa%23diff-970ae648187190f86bafc8f193b7538200eba164fad0674428b6487582c089cc
PatchThird Party Advisory
snyk.io / vuln/SNYK-JS-SYSTEMINFORMATION-1043753
Third Party Advisory