Search/CVE-2020-6656
● CVE — Medium

CVE-2020-6656

VendoreatonProducteasysoftDiscoveredJan 7, 2021UpdatedNov 21, 2024

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.

CVSS v3.1
5.8 MEDIUM
EPSS
2.82%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 3, 2026
▲ 0.12pp
2.71% → 2.82% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Jan 7, 2021
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024