← Back

CVE-2020-5674

nvd nist
Published: Nov 24, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (38)

Epson
33 products
Album Print
Color Calibration Utility
Colorbase
Colorio Easy Print
Connect
Creativity Suite
E Photo
Easy Photo Print
Easy Settings
Imaging Workshop
Link2
Multi Print Quicker
Net Config
Net Config Se
Net Print
Net Software Development Kit
Photolier
Photoquicker
Photostarter
Pm T990 Integrated Installer
Print
Print Layout
Prolab Print
Remote Printer Driver
Scan Icm Updater
Scanner Driver
Web To Page
Webconfig
Universal Print Driver
Status Monitor 2
Status Monitor 3
Ec 01 Firmware
Print Image Framer Tool
Configuration A
33 vulnerable
Vulnerable SoftwareAffected Versions
Album Print
All versions
Color Calibration Utility
All versions
Colorbase
All versions
Colorio Easy Print
All versions
Connect
All versions
Creativity Suite
All versions
Epson
E Photo
All versions
E Photo
All versions
Epson
Easy Photo Print
All versions
Easy Photo Print
All versions
Easy Settings
All versions
Imaging Workshop
All versions
Link2
All versions
Multi Print Quicker
All versions
Net Config
All versions
Net Config Se
All versions
Net Print
All versions
Net Software Development Kit
All versions
Photolier
All versions
Photoquicker
All versions
Photostarter
Version 3.1
Pm T990 Integrated Installer
All versions
Epson
Print
All versions
Print
All versions
Print
All versions
Print Layout
All versions
Epson
Prolab Print
All versions
Prolab Print
All versions
Remote Printer Driver
All versions
Scan Icm Updater
All versions
Scanner Driver
All versions
Web To Page
All versions
Webconfig
All versions
Configuration B
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Universal Print Driver
All versions
Running on/withPlatform Versions
Microsoft
Windows
All versions
Microsoft
Windows
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Status Monitor 2
All versions
Status Monitor 3
All versions
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ec 01 Firmware
All versions
Running on/withPlatform Versions
Epson
Ec 01
All versions
Configuration E
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Print Image Framer Tool
All versions
Running on/withPlatform Versions
Microsoft
Windows 98
All versions
Microsoft
Windows Me
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (6)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.