CVE-2020-7814
High
Description
RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hackers File download & execution vulnerability in ____COMPONENT____ of RAONWIZ RAON KUpload allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions prior to 2018.0.2.51 on Windows.
SeverityHigh
CVSS7.8
Exploit probability—
ProductRaonwiz Raon K Upload
PublishedJul 10, 2020
First seenJul 10, 2020
How to fix
Update
- raonwiz raon_k_upload2018.0.2.51 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| raonwiz raon_k_upload | v < 2018.0.2.51 | 2018.0.2.51 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.