Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Eaton

Published: 2021-01-07T17:22:15

Updated: 2024-08-04T09:11:04.659Z

Reserved: 2020-01-09T00:00:00

Link: CVE-2020-6656

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-01-07T18:15:14.027

Modified: 2024-11-21T05:36:06.487

Link: CVE-2020-6656

cve-icon Redhat

No data.