CVE-2020-5674

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-24 · updated 2026-06-17
Weakness: CWE-427

Description

Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Epson Album Print: all versions
Epson Color Calibration Utility: all versions
Epson Colorbase: all versions
Epson Colorio Easy Print: all versions
Epson Connect: all versions
Epson Creativity Suite: all versions
Epson E-Photo: all versions
Epson Easy Photo Print: all versions
Epson Easy Settings: all versions
Epson Ec-01 Firmware: all versions
Epson Imaging Workshop: all versions
Epson Link2: all versions
Epson Multi-Print Quicker: all versions
Epson Net Config: all versions
Epson Net Config Se: all versions
Epson Net Print: all versions
Epson Net Software Development Kit: all versions
Epson Photolier: all versions
Epson Photoquicker: all versions
Epson Photostarter: 3.1
Epson Pm-T990 Integrated Installer: all versions
Epson Print: all versions
Epson Print Image Framer Tool: all versions
Epson Print Layout: all versions
Epson Prolab Print: all versions
Epson Remote Printer Driver: all versions
Epson Scan Icm Updater: all versions
Epson Scanner Driver: all versions
Epson Status Monitor 2: all versions
Epson Status Monitor 3: all versions

References

Get alerted when CVE-2020-5674 or the next vulnerability affects your stack