CVE-2021-20722 Vulnerability Details

  /     /     /  

CVE-2021-20722 Metadata Quick Info

CVE Published: 24/05/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: jpcert | Vendor: FUJITSU LIMITED and PFU LIMITED | Product: The installers of ScanSnap Manager and the Software Download Installer
Status : PUBLISHED

---

CVE-2021-20722 Description

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Untrusted search path vulnerability
Source: FUJITSU LIMITED and PFU LIMITED

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).