What’s Vulnerable › Vulnerabilities

CVE-2020-5681

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-24 · updated 2026-06-17
• Weakness: CWE-427

Description

Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Epsonnet Setupmanager: before 2.2.15 — fixed in 2.2.15
• Epson Offirio Synergyware Printdirector: before 1.6.1.1\/1.6.1.2 — fixed in 1.6.1.1\/1.6.1.2

How to fix

Upgrade to a fixed version: Epsonnet Setupmanager 2.2.15; Epson Offirio Synergyware Printdirector 1.6.1.1\/1.6.1.2. Check the vendor advisory for mitigations.

References

• https://jvn.jp/en/jp/JVN94244575/index.html
• https://www.epson.jp/support/misc_t/201217_oshirase.htm
• https://jvn.jp/en/jp/JVN94244575/index.html
• https://www.epson.jp/support/misc_t/201217_oshirase.htm

Get alerted when CVE-2020-5681 or the next vulnerability affects your stack