Vulnerability Description
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dext5 | Dext5Upload | <= 5.0.0.117 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312Third Party Advisory
FAQ
What is CVE-2020-7875?
CVE-2020-7875 is a vulnerability with a CVSS score of 7.5 (HIGH). DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This...
How severe is CVE-2020-7875?
CVE-2020-7875 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7875?
Check the references section above for vendor advisories and patch information. Affected products include: Dext5 Dext5Upload, Microsoft Windows.