CVE-2020-7808: Raonwiz Raon K Upload

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update module(web.js) allows an attacker to modify arguments which causes downloading a random DLL and injection on it.

Affected products

• Raonwiz Raon K Upload: up to and including 2018.0.2.51

Published 2020-05-21. Last modified 2026-06-17.