Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Eaton
Published: 2021-01-07T17:22:15
Updated: 2024-08-04T09:11:04.659Z
Reserved: 2020-01-09T00:00:00
Link: CVE-2020-6656
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-01-07T18:15:14.027
Modified: 2024-11-21T05:36:06.487
Link: CVE-2020-6656
Redhat
No data.