Read the docs

RAONWIZ

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

RAONWIZ records in CISA KEV

No RAONWIZ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

12 records

Priority MEDIUM 44

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00952 Published 2021-09-07 No fix listed CWE-20
Priority MEDIUM 44

RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-excution attacks by hac…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2020-07-10 Fixed in 2018.0.2.51 CWE-20
Priority MEDIUM 43

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00689 Published 2020-05-21 No fix listed CWE-353
Priority MEDIUM 41

A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01477 Published 2021-08-05 Fixed in 2018.0.2.56 CWE-20
Priority LOW 39

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00626 Published 2021-10-28 No fix listed CWE-494
Priority LOW 39

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00773 Published 2020-05-07 No fix listed CWE-20
Priority LOW 35

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00798 Published 2020-09-02 No fix listed CWE-20
Open these records in search →