{"id":"CVE-2020-36245","aliases":["GHSA-q5h6-49gg-2wfg","PYSEC-2021-65"],"url":"https://o3.security/vulnerability/CVE-2020-36245","summary":"GramAddict bot uses dependency with reverse tcp backdoor","details":"GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.","published":"2021-02-17T22:15:12.633Z","modified":"2026-07-08T21:25:55.541450Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"PyPI","name":"gramaddict","fixedVersion":"1.2.5"}],"fix":null,"references":[{"type":"EVIDENCE","url":"https://github.com/GramAddict/bot/issues/134"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T21:25:55.541450Z"}}