CVEvulnerability

CVE-2020-5674

7.8 HIGH Published 2020-11-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

• epson album print • epson color calibration utility • epson colorbase • epson colorio easy print • epson connect • epson creativity suite • epson e-photo • epson easy photo print • epson easy settings • epson imaging workshop • epson link2 • epson multi-print quicker • epson net config • epson net config se • epson net print • epson net software development kit • epson photolier • epson photoquicker • epson photostarter 3.1 • epson pm-t990 integrated installer • epson print • epson print image framer tool • epson print layout • epson prolab print • epson remote printer driver • epson scan icm updater • epson scanner driver • epson web to page • epson webconfig • epson universal print driver • epson status monitor 2 • epson status monitor 3 • epson ec-01 firmware

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References