CVE-2020-5681

Published: Dec 24, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (2)

Products: Epson: Epsonnet Setupmanager, Offirio Synergyware Printdirector

2 products

Epsonnet Setupmanager

Offirio Synergyware Printdirector

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Epson Epsonnet Setupmanager	Before 2.2.15
Epson Offirio Synergyware Printdirector	Before 1.6.1.1\/1.6.1.2

Related CWEs

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (4)

https://jvn.jp/en/jp/JVN94244575/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.epson.jp/support/misc_t/201217_oshirase.htm

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/jp/JVN94244575/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.epson.jp/support/misc_t/201217_oshirase.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.