CVE-2020-7875CWE-494

RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability

High · published October 28, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2021-10-28T15:28Z
EPSS history
Timeline
  • 28 OCT 15:28Z
    RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability
    cvelistv5