RSS   Vulnerabilities for 'Easysoft'   RSS

2021-01-07
 
CVE-2020-6656

CWE-843
 

 
Eaton's easySoft software v7.20 and prior are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.

 
 
CVE-2020-6655

CWE-125
 

 
The Eaton's easySoft software v7.20 and prior are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

 

 >>> Vendor: Eaton 18 Products
Network shutdown module
Proview
Elcsoft
Xcomfort ethernet communication interface
Eamaxx series epdu firmware
Emaxxx series epdu firmware
Eswaxx series epdu firmware
Emaaxx series epdu firmware
Eamxxx series epdu firmware
Intelligent power manager
9000x firmware
9px ups firmware
Halo home
Ups companion
Secureconnect
Easysoft
Intelligent power manager virtual appliance
Intelligent power protector


Copyright 2024, cxsecurity.com

 

Back to Top