Medium severity5.8NVD Advisory· Published Jan 7, 2021· Updated Jun 17, 2026

CVE-2020-6655

Description

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eaton/EasySoft3 versions
cpe:2.3:a:eaton:easysoft:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:eaton:easysoft:*:*:*:*:*:*:*:*range: >=7.00,<7.22
- (no CPE)range: <7.22
- (no CPE)range: v7.xx prior to v7.22

Patches

Vulnerability mechanics

References

us-cert.cisa.gov/ics/advisories/icsa-21-007-03nvdThird Party AdvisoryUS Government Resource
www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/easySoft-eaton-vulnerability-advisory.pdfnvdVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-20-1443/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000