CVE-2020-7830 - CVE House
Back to Database
Status published High CVE-2020-7830

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could...

Vulnerability Description

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7830

Credits & Attribution

No credits recorded in the NVD database.

References

More from RAONWIZ

View All →
CVE-2020-7875
RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability
High 7.5
CVE-2020-7832
RAONWIZ DEXT5 Upload remote code execution vulnerability
High 8.8
CVE-2020-7814
RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could...
High 7.8

Affected Vendor

Affected Software

RAON KUpload
Vulnerable Versions:
<=2018.0.2.50

Timeline

Official Publish: September 2nd, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.