Most recent entries from all

cnvd-2021-03023

EUVD-2026-37520

fkie_cve-2020-6655

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

GHSA-98x2-8rq4-gpx2

The Eaton's easySoft software v7.20 and prior are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

gsd-2020-6655

ICSA-21-007-03 — Eaton EASYsoft (Update A)

The affected product allows a pointer to be read into an object from a file, resulting in type confusion.CVE-2020-6656 has been assigned to this vulnerability. A CVSS v3 base score of 5.8 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L). The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to modify or crash the program.CVE-2020-6655 has been assigned to this vulnerability. A CVSS v3 base score of 5.8 has been assigned; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L).