Vulnerability Details : CVE-2010-3920
The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the "C:\Program Files" folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories.
Exploit prediction scoring system (EPSS) score for CVE-2010-3920
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-3920
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
CWE ids for CVE-2010-3920
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-3920
-
http://www.epson.jp/support/misc/lps7100_9000/index.htm
LP-S7100/LP-S9000 ご愛用のお客様へ| 重要なお知らせ | エプソンVendor Advisory
-
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html
JVNDB-2010-000059 - JVN iPedia - 脆弱性対策情報データベース
-
http://jvn.jp/en/jp/JVN62736872/index.html
JVN#62736872: Vulnerability in Epson printer driver installer where access permissions are changed
Products affected by CVE-2010-3920
- cpe:2.3:a:epson:lp-s7100_driver_4.1.0:*:*:*:*:*:*:*:*
- cpe:2.3:a:epson:lp-s7100_driver_4.1.7:*:*:*:*:*:*:*:*
- cpe:2.3:a:epson:lp-s9000_driver_4.1.0:*:*:*:*:*:*:*:*
- cpe:2.3:a:epson:lp-s9000_driver_4.1.11:*:*:*:*:*:*:*:*