Skip to content
OpenAdvisories
High · 7.5 CVE-2020-7875 EUVD-2020-28807GHSA-mxj4-4wm2-q68p

RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability

Published Oct 28, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

Affected products

VendorProductAffectedFixed
RAONWIZ DEXT5 Upload 5.0.0.117 – ≤ 5.0.0.117 —

References