Security Advisory

CVE-2021-20722

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-24 03:20:29

Last updated 2024-08-03 17:53:21

Assigner jpcert

State PUBLISHED

Description

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

← Browse all CVEs View on cve.org ↗