CVE-2021-20674

2021-03-1201:00:19

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

36.6%

JSON

Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified directory and to execute arbitrary code with the privilege of the user invoking the installer when a terminal is connected remotely using Remote desktop.

CNA Affected

[
  {
    "product": "Installer of MagicConnect Client program",
    "vendor": "NTT TechnoCross Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "distributed before 2021 March 1"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN18056666/index.html

www.magicconnect.net/information/202103110900-2

0.001 Low

EPSS

Percentile

36.6%

JSON

Related for CVELIST:CVE-2021-20674