CVE-2020-7875 - CVE House
Back to Database
Status published High CVE-2020-7875

RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability

Vulnerability Description

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7875

Credits & Attribution

No credits recorded in the NVD database.

References

More from RAONWIZ

View All →
CVE-2020-7832
RAONWIZ DEXT5 Upload remote code execution vulnerability
High 8.8
CVE-2020-7830
RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could...
High 7.8
CVE-2020-7814
RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could...
High 7.8

Affected Vendor

Affected Software

DEXT5 Upload
Vulnerable Versions:
5.0.0.117

Timeline

Official Publish: October 28th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-494

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.