CVE-2019-19169

Published: May 6, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.

Affected (1)

Products: Raonwiz: Dext5

Raonwiz

1 product

Dext5

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Raonwiz Dext5	Version 2.7

Running on/with	Platform Versions
Microsoft Activex	Before 5.0.0.117

References (4)

http://www.dext5.com/page/support/notice_view.aspx?pSeq=26

Source: vuln@krcert.or.kr

Vendor Advisory

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35353

Source: vuln@krcert.or.kr

Third Party Advisory

http://www.dext5.com/page/support/notice_view.aspx?pSeq=26

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35353

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.