VULNERABILITY INTELLIGENCE

CVE-2020-7830

CVSS score7.8 HIGH
EPSS probability0.80%
CISA KEVNot currently listed
Published2020-09-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references