CVE-2020-5674
High
Description
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
SeverityHigh
CVSS7.8
Exploit probability—
ProductEpson Album Print
PublishedNov 24, 2020
First seenNov 24, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| epson album_print | No range specified | — |
| epson color_calibration_utility | No range specified | — |
| epson colorbase | No range specified | — |
| epson colorio_easy_print | No range specified | — |
| epson connect | No range specified | — |
| epson creativity_suite | No range specified | — |
| epson e-photo | No range specified | — |
| epson easy_photo_print | No range specified | — |
| epson easy_settings | No range specified | — |
| epson imaging_workshop | No range specified | — |
| epson link2 | No range specified | — |
| epson multi-print_quicker | No range specified | — |
| epson net_config | No range specified | — |
| epson net_config_se | No range specified | — |
| epson net_print | No range specified | — |
| epson net_software_development_kit | No range specified | — |
| epson photolier | No range specified | — |
| epson photoquicker | No range specified | — |
| epson photostarter | 3.1 | — |
| epson pm-t990_integrated_installer | No range specified | — |
| epson print | No range specified | — |
| epson print_image_framer_tool | No range specified | — |
| epson print_layout | No range specified | — |
| epson prolab_print | No range specified | — |
| epson remote_printer_driver | No range specified | — |
| epson scan_icm_updater | No range specified | — |
| epson scanner_driver | No range specified | — |
| epson web_to_page | No range specified | — |
| epson webconfig | No range specified | — |
| epson universal_print_driver | No range specified | — |
| epson status_monitor_2 | No range specified | — |
| epson status_monitor_3 | No range specified | — |
| epson ec-01_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.