CVE-2020-5674
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an...
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Record
CVE-2020-5674- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-427
- Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Record
CVE-2020-5674- Updated
- 2026-11-02
EUVDEUVD-2020-26835 No score
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Record
EUVD-2020-26835- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-784m-xw5j-hrmc No score
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an...
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Record
GHSA-784m-xw5j-hrmc- Weakness
- CWE-426
- Updated
- 2026-11-02
Affected products
- seiko epson corporation the installers of multiple seiko epson products
- epson album print
- epson color calibration utility
- epson colorbase
- epson colorio easy print
- epson connect
- epson creativity suite
- epson e-photo
- epson easy photo print
- epson easy settings
- epson ec-01 firmware
- epson imaging workshop
Show 22 moreShow less
- epson link2
- epson multi-print quicker
- epson net config
- epson net config se
- epson net print
- epson net software development kit
- epson photolier
- epson photoquicker
- epson photostarter
- epson pm-t990 integrated installer
- epson print
- epson print image framer tool
- epson print layout
- epson prolab print
- epson remote printer driver
- epson scan icm updater
- epson scanner driver
- epson status monitor 2
- epson status monitor 3
- epson universal print driver
- epson web to page
- epson webconfig
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-5674 is a high vulnerability (CVSS 7.8) in Seiko Epson Corporation The Installers Of Multiple Seiko Epson Products, published November 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. No source names a fixed version.