CVE-2020-7808 — RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability

CVE-2020-7808

RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability PUBLISHED

Description (CNA)

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.

Affected (CNA)

Vendor / product	Versions
RAONWIZ Inc / K Upload	affected unspecified through 2018.0.2.51

CWE

CWE-353, CWE-88

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35424

ADP enrichment

CVE

No English description supplied.

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35424