Cyber Resilience

CVE-2021-20722

High

Published: 24 May 2021

Published
24 May 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0024 47.3th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-20722 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Fujitsu Scansnap Manager. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 47.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

This vulnerability is AI-related — categorised as Other AI Platforms.

EU & UK References

Vulnerability details

Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user…

more

invoking the installer via a Trojan horse DLL in an unspecified directory.

CWE(s)
CWE-427

AI Security AnalysisAI

AI Category
Other AI Platforms
Risk Domain
N/A
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Matched keywords: trojan

Related Threats

Affected Assets

fujitsu
scansnap manager
≤ 7.0l20

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References