Skip to content
OpenAdvisories
High · 8.8 CVE-2020-7832 EUVD-2020-28764GHSA-xjhc-m7rm-mxvq

RAONWIZ DEXT5 Upload remote code execution vulnerability

Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)

Affected products

VendorProductAffectedFixed
RAONWIZ DEXT5 Upload 5.0.0.117 – ≤ 5.0.0.117 —

References