CVE-2020-7864

HIGH

Raonwiz DEXT5Editor <3.5.1405747.1100.03 - Command Injection

Title source: llm

Description

Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36085

Scores

CVSS v3 7.8

EPSS 0.0036

EPSS Percentile 58.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-434

Status published

Products (1)

dext5/dext5_editor < 3.5.1405747.1100.03

Published Jun 15, 2021

Tracked Since Feb 18, 2026