CVE-2020-7864 - Raonwiz DEXT5 Editor File upload and Execution vulnerability

Back Back to CVE browser

CRITICAL

Raonwiz DEXT5 Editor File upload and Execution vulnerability

Published Jun 15, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 0.96%

Description

Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03.

Affected products

Vendor Raonwiz Product DEXT5Editor Default
unknown
Affected
- ≥ unspecified, < 3.5.1405747.1100.03

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Raonwiz	DEXT5Editor	unknown	Affected ≥ unspecified, < 3.5.1405747.1100.03

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28796
Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36085
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28796		Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36085		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner krcert

Published Jun 15, 2021

Updated Sep 16, 2024

Reserved Jan 22, 2020

Link CVE-2020-7864

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7864

Red Hat

No data

ENISA EUVD

Assigner krcert

Published Jun 15, 2021

Updated Sep 16, 2024

Link EUVD-2020-28796

GitHub

No data