CVE-2021-20793

2021-08-2601:20:31

jpcert

www.cve.org

untrusted search path

sony audio usb driver

hap music transfer

privilege escalation

arbitrary code execution

EPSS

0.002

Percentile

53.6%

JSON

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

CNA Affected

[
  {
    "product": "The installers of multiple Sony products",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "The installer of Sony Audio USB Driver V1.10 and prior and The installer of HAP Music Transfer Ver.1.3.0 and prior"
      }
    ]
  }
]