CVE-2020-6655File parsing Out-Of-Bounds read remote code execution
- 5.8MediumCVSS base score
- 2.8%Exploitation in 30 daysEPSS · top 13% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.
Timeline
ID reserved
By Eaton
- 12 months later
· 12 months later
Published
- 4 years later
· 4 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| EatonCNA (assigner) | 3.1 | Medium5.8 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 2.8% · top 13% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.
Affected products
- affected v7.xx prior to v7.22
What to do
Solution: Apply the patch once it is provided by Eaton.
Workaround: Do not upload the E70 file from an untrusted source.
References
References3
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/easySoft-eaton-vulnerability-advisory.pdf (opens in a new tab)x_refsource_MISCx_transferred
- https://www.zerodayinitiative.com/advisories/ZDI-20-1443/ (opens in a new tab)x_refsource_MISCx_transferred
- https://us-cert.cisa.gov/ics/advisories/icsa-21-007-03 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2020-27802 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2020-6655)Record last updated .