CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-7808
Critical (9.8) in raonwiz raon k upload. EPSS 0.7% chance of exploitation in the next 30 days.
In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-88, CWE-353
- Published
- Modified
- Record from
- the NVD, synced
Affected
- raonwiz:raon_k_upload