CVE-2021-20722
Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.
CVE-2021-20722
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2021-20722
The installers of ScanSnap Manager and the Software Download Installer
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "FUJITSU LIMITED and PFU LIMITED",
"product": "The installers of ScanSnap Manager and the Software Download Installer",
"versions": [
{
"status": "affected",
"version": "The installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe"
}
]
}
]- Related CVEs
- CVE-2021-20722
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #12227 · Revision 1
- Added to Heist Feed
- Publisher date