exploitDog

CVE-2021-20722

Опубликовано: 24 мая 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Ссылки

https://jvn.jp/en/jp/JVN65733194/index.html
Third Party Advisory
https://scansnap.fujitsu.com/global/dl/
Product
Vendor Advisory
https://jvn.jp/en/jp/JVN65733194/index.html
Third Party Advisory
https://scansnap.fujitsu.com/global/dl/
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fujitsu:scansnap_manager:*:*:*:*:*:*:*:*

Версия до 7.0l20 (исключая)

EPSS

Процентиль: 23%

0.00075

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-39vj-pmcw-jg9x

CVSS3: 7.8

github

больше 3 лет назад

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

EPSS

Процентиль: 23%

0.00075

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-427