CVE-2021-20722

2021-05-2403:20:29

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

36.4%

JSON

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

CNA Affected

[
  {
    "product": "The installers of ScanSnap Manager and the Software Download Installer",
    "vendor": "FUJITSU LIMITED and PFU LIMITED",
    "versions": [
      {
        "status": "affected",
        "version": "The installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN65733194/index.html

scansnap.fujitsu.com/global/dl/

0.001 Low

EPSS

Percentile

36.4%

JSON

Related for CVELIST:CVE-2021-20722