Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.
Vendor
PFU Limited vulnerabilities
3 published CVES affecting PFU Limited, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Image Scanner Driver for Linux (fi Series) 2
- Image Scanner Driver for Linux (SP Series) 2
- ScanSnap Manager installers 1
Latest PFU Limited CVEs
Newest publication first
-
MediumCVSS 5.2 EPSS 0.12%
-
MediumCVSS 5.4 EPSS 0.43%
Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.
-
HighCVSS 8.5 EPSS 0.14%
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.