VULNERABILITY INTELLIGENCE

CVE-2021-20722

CVSS score7.8 HIGH

EPSS probability0.44%

CISA KEVNot currently listed

Published2021-05-24

Last modified2026-10-07

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.

Weakness classification

nvd@nist.gov: CWE-427
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-427

Primary references

vultures@jpcert.or.jp — Third Party Advisory
vultures@jpcert.or.jp — Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory