CVE-2020-5569 : An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is s

An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20TY, HD-MA20TY, HD-MB20TS, HD-MA20TS), CANVIO PREMIUM 1TB(HD-MB10TY, HD-MA10TY, HD-MB10TS, HD-MA10TS), CANVIO SLIM 1TB(HD-SB10TK, HD-SB10TS), and CANVIO SLIM 500GB(HD-SB50GK, HD-SA50GK, HD-SB50GS, HD-SA50GS), and which was downloaded before 2020 May 10. Since it registers Windows services with unquoted file paths, when a registered path contains spaces, and a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service.

Published 2020-04-20 08:15:15

Updated 2020-05-05 19:17:02

Source JPCERT/CC

View at NVD, CVE.org

Products affected by CVE-2020-5569

Toshiba » Password Tool For Windows
Versions up to, including, (<=) 1.20.6620
cpe:2.3:a:toshiba:password_tool_for_windows:*:*:*:*:*:*:*:*
Matching versions
When used together with: Toshiba » Hd-ma10ts » Version: N/A
When used together with: Toshiba » Hd-ma10ty » Version: N/A
When used together with: Toshiba » Hd-ma20ts » Version: N/A
When used together with: Toshiba » Hd-ma20ty » Version: N/A
When used together with: Toshiba » Hd-ma30ts » Version: N/A
When used together with: Toshiba » Hd-ma30ty » Version: N/A
When used together with: Toshiba » Hd-mb10ts » Version: N/A
When used together with: Toshiba » Hd-mb10ty » Version: N/A
When used together with: Toshiba » Hd-mb20ts » Version: N/A
When used together with: Toshiba » Hd-mb20ty » Version: N/A
When used together with: Toshiba » Hd-mb30ts » Version: N/A
When used together with: Toshiba » Hd-mb30ty » Version: N/A
When used together with: Toshiba » Hd-sa50gk » Version: N/A
When used together with: Toshiba » Hd-sa50gs » Version: N/A
When used together with: Toshiba » Hd-sb10tk » Version: N/A
When used together with: Toshiba » Hd-sb10ts » Version: N/A
When used together with: Toshiba » Hd-sb50gk » Version: N/A
When used together with: Toshiba » Hd-sb50gs » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-5569

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-5569

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.5	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-5569

CWE-428 Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-5569

https://www.canvio.jp/news/20200420.htm

TDSCSA00699-01： CANVIO™シリーズのWindows 用パスワードツールによって登録されるWindows サービスの実行ファイルパスが引用符で囲まれていない脆弱性について｜東芝：パーソナルストレージ
Vendor Advisory
https://jvn.jp/en/jp/JVN13467854/index.html

JVN#13467854: Toshiba Electronic Devices & Storage software registers unquoted service paths
Third Party Advisory

Jump to

Vulnerability Details : CVE-2020-5569

Products affected by CVE-2020-5569

Exploit prediction scoring system (EPSS) score for CVE-2020-5569

CVSS scores for CVE-2020-5569

CWE ids for CVE-2020-5569

References for CVE-2020-5569