CVE-2021-20793 Vulnerability Details

  /     /     /  

CVE-2021-20793 Metadata Quick Info

CVE Published: 26/08/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: jpcert | Vendor: Sony Corporation | Product: The installers of multiple Sony products
Status : PUBLISHED

---

CVE-2021-20793 Description

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Untrusted search path vulnerability
Source: Sony Corporation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).