CVE-2020-7808

CVE-2020-7808 is a critical vulnerability affecting RAONWIZ K Upload v2018.0.2.51 and earlier, as well as various Microsoft Windows operating systems when running the affected software. The flaw stems from an insecure automatic update process that lacks integrity checks on the 'web.js' update module. This allows an attacker to manipulate arguments, leading to the download of arbitrary DLLs and subsequent code injection. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and no user interaction requirement. A successful exploit could result in complete compromise of confidentiality, integrity, and availability of the affected system. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on the CISA KEV catalog, suggesting it is not being actively exploited in the wild. Community discussion and media coverage are also minimal, indicating low public awareness despite its high severity.