Lucene search

[email protected]CVE-2021-20722

HistoryMay 24, 2021 - 4:15 a.m.

CVE-2021-20722

2021-05-2404:15:14

CWE-427

[email protected]

web.nvd.nist.gov

cve-2021-20722

vulnerability

scansnap manager

privilege escalation

arbitrary code execution

nvd

winssinst2jp.exe

winssinst2ix1500jp.exe

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.2%

JSON

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Affected configurations

Vulners

NVD

Node

fujitsu_limited_and_pfu_limitedthe_installers_of_scansnap_manager_and_the_software_download_installerRange<7.0L20

CPENameOperatorVersion
fujitsu:scansnap_managerfujitsu scansnap managerlt7.0l20

CPE	Name	Operator	Version
fujitsu:scansnap_manager	fujitsu scansnap manager	lt	7.0l20

CNA Affected

[
  {
    "product": "The installers of ScanSnap Manager and the Software Download Installer",
    "vendor": "FUJITSU LIMITED and PFU LIMITED",
    "versions": [
      {
        "status": "affected",
        "version": "The installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN65733194/index.html

scansnap.fujitsu.com/global/dl/

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.2%

JSON

Related for CVE-2021-20722

nvd1 prion1 jvn1 cvelist1