Skip to content
OpenAdvisories
Medium ICSA-21-007-03 2 CVEs

Eaton EASYsoft (Update A)

Published Jan 7, 2021 · Updated Jan 26, 2021 · Revision 2

Vendor: Eaton Product: EasySoft

Summary

Successful exploitation of these vulnerabilities could allow a local attacker to modify or crash the program.

Vulnerabilities 2

  • Medium 5.8
    CVE-2020-6655

    File parsing Out-Of-Bounds read remote code execution

    The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the ap…

    Eaton easySoft Software
  • Medium 5.8
    CVE-2020-6656

    File parsing Type Confusion Remote code execution vulerability

    Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in t…

    Eaton easySoft Software

Revision history

  1. #2

    ICSA-21-007-03 Eaton EASYsoft (Update A)

  2. #1

    ICSA-21-007-03 Eaton EASYsoft

References