CVE-2020-7864: Raonwiz DEXT5 Editor File upload and Execution vulnerability
Published Jun 15, 2021
·Updated
Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03.
Affected Software
1 affected component
DEXT5 DEXT5 Editor<3.5.1405747.1100.03
Event History
Jun 15, 2021
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7864?
CVE-2020-7864 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2020-7864?
To fix CVE-2020-7864, update DEXT5 Editor to version 3.5.1405747.1100.03 or later.
3
What types of attacks can be performed using CVE-2020-7864?
CVE-2020-7864 allows attackers to bypass authentication for file uploads, leading to potential remote code execution.
4
Which versions of DEXT5 Editor are affected by CVE-2020-7864?
DEXT5 Editor versions prior to 3.5.1405747.1100.03 are affected by CVE-2020-7864.
5
What impact does CVE-2020-7864 have on system security?
CVE-2020-7864 can severely compromise system security by allowing unauthorized remote code execution.