What’s Vulnerable › Vulnerabilities

CVE-2020-6655: File parsing Out-Of-Bounds read remote code execution

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-07 · updated 2026-06-17
• Weakness: CWE-20

Description

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

Affected products

• Eaton easySoft Software: from 7.00 before 7.22 — fixed in 7.22

How to fix

Upgrade to a fixed version: Eaton easySoft Software 7.22. Check the vendor advisory for mitigations.

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-007-03
• https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/easySoft-eaton-vulnerability-advisory.pdf
• https://www.zerodayinitiative.com/advisories/ZDI-20-1443/
• https://us-cert.cisa.gov/ics/advisories/icsa-21-007-03
• https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/easySoft-eaton-vulnerability-advisory.pdf
• https://www.zerodayinitiative.com/advisories/ZDI-20-1443/

Get alerted when CVE-2020-6655 or the next vulnerability affects your stack