Vulnerability · Published Jul 10, 2020 · Assigned by krcert
CVE-2020-7814
High 7.8
In plain English
A high-severity security flaw in RAON KUpload from RAONWIZ. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities).
Official description
RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download & execution vulnerability in ____COMPONENT____ of RAONWIZ RAON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions prior to 2018.0.2.51 on Windows.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| RAONWIZ | RAON KUpload | 2018.0.2.50 – before 2018.0.2.51 |