CVE-2019-19164

Published: May 7, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected (1)

Products: Raonwiz: Dext5

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Raonwiz Dext5	Version 2.7

Running on/with	Platform Versions
Microsoft Activex	Up to 5.0.0.112

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.dext5.com/page/support/notice_view.aspx?pSeq=23

Source: vuln@krcert.or.kr

Vendor Advisory

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35344

Source: vuln@krcert.or.kr

Third Party Advisory

http://www.dext5.com/page/support/notice_view.aspx?pSeq=23

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35344

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.