What’s Vulnerable › Vulnerabilities

CVE-2020-7808: RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-21 · updated 2026-06-17
• Weakness: CWE-88

Description

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.

Affected products

• Raonwiz,inc RAON K Upload: through 2018.0.2.51

References

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35424
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35424

Get alerted when CVE-2020-7808 or the next vulnerability affects your stack