What’s Vulnerable › Vulnerabilities

CVE-2020-7812: Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-28 · updated 2026-06-17
• Weakness: CWE-494

Description

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC.

Affected products

• Kaoni ezHTTPTrans: through 1.0.0.70

References

• http://www.kaoni.com/
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428
• http://www.kaoni.com/
• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428

Get alerted when CVE-2020-7812 or the next vulnerability affects your stack