Path traversal in EKAKIN Shihonkanri Plus GOOUT
Priority MEDIUM 43CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors.
Why it matters now
EPSS 0.01935 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| EKAKIN | Shihonkanri Plus GOOUT | Ver1.5.8 and Ver2.2.10 | — | No fix listed | CNA |
- Shihonkanri Plus GOOUT VendorEKAKIN Affected Ver1.5.8 and Ver2.2.10 Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:1.5.8:*:*:*:*:*:*:* | 1.5.8 | Vulnerable | Shihonkanri Plus Goout Project |
| cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:2.2.10:*:*:*:*:*:*:* | 2.2.10 | Vulnerable | Shihonkanri Plus Goout Project |
- cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Shihonkanri Plus Goout Project
- cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·Shihonkanri Plus Goout Project
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-5554
- 2026-10-03 Alias added: GHSA-wffx-cv79-89x8
References
More EKAKIN vulnerabilities
- TI-2020-04526 OS command injection in EKAKIN Shihonkanri Plus GOOUT CVSS 3.1CRITICAL 9.8
- TI-2020-04525 Improper input validation in EKAKIN Shihonkanri Plus GOOUT CVSS 3.1CRITICAL 9.1
- TI-2023-23511 Path traversal in EKAKIN Shihonkanri Plus CVSS 3.1HIGH 7.8
Sources
- CVE-2020-5554 · CVE Program
- CVE-2020-5554 · NVD
- FIRST EPSS
- GHSA-wffx-cv79-89x8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences