CVE-2020-6655 : What You Need to Know

Eaton's easySoft Software versions prior to v7.22 are vulnerable to an Out-of-bounds remote code execution issue when parsing E70 files.

Understanding CVE-2020-6655

This CVE involves a critical vulnerability in Eaton's easySoft Software that could allow remote code execution.

What is CVE-2020-6655?

The vulnerability in Eaton's easySoft Software versions prior to v7.22 enables a malicious actor to execute arbitrary code or crash the application by manipulating E70 files.

The Impact of CVE-2020-6655

The vulnerability poses a medium-severity risk with high confidentiality impact and requires user interaction for exploitation.

Technical Details of CVE-2020-6655

Eaton's easySoft Software is susceptible to a critical Out-of-bounds remote code execution vulnerability.

Vulnerability Description

Improper validation and parsing of E70 file content in the application lead to the vulnerability.

Affected Systems and Versions

Product: easySoft Software
Vendor: Eaton
Versions Affected: v7.xx prior to v7.22

Exploitation Mechanism

Attack Complexity: High
Attack Vector: Local
Privileges Required: None
User Interaction: Required
Scope: Unchanged
Vector String: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

Mitigation and Prevention

Eaton has provided solutions and workarounds to address the CVE-2020-6655 vulnerability.

Immediate Steps to Take

Avoid uploading E70 files from untrusted sources.

Long-Term Security Practices

Regularly update the software to the latest version.

Patching and Updates

Apply the patch provided by Eaton once available.