Improper input validation in EKAKIN Shihonkanri Plus GOOUT
Priority MEDIUM 42CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue.
Why it matters now
EPSS 0.01283 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| EKAKIN | Shihonkanri Plus GOOUT | Ver1.5.8 and Ver2.2.10 | — | No fix listed | CNA |
- Shihonkanri Plus GOOUT VendorEKAKIN Affected Ver1.5.8 and Ver2.2.10 Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:1.5.8:*:*:*:*:*:*:* | 1.5.8 | Vulnerable | Shihonkanri Plus Goout Project |
| cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:2.2.10:*:*:*:*:*:*:* | 2.2.10 | Vulnerable | Shihonkanri Plus Goout Project |
- cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·Shihonkanri Plus Goout Project
- cpe:2.3:a:shihonkanri_plus_goout_project:shihonkanri_plus_goout:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·Shihonkanri Plus Goout Project
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-5555
- 2026-10-03 Alias added: GHSA-r4j8-gm27-2hj6
References
More EKAKIN vulnerabilities
- TI-2020-04526 OS command injection in EKAKIN Shihonkanri Plus GOOUT CVSS 3.1CRITICAL 9.8
- TI-2020-04524 Path traversal in EKAKIN Shihonkanri Plus GOOUT CVSS 3.1CRITICAL 9.1
- TI-2023-23511 Path traversal in EKAKIN Shihonkanri Plus CVSS 3.1HIGH 7.8
Sources
- CVE-2020-5555 · CVE Program
- CVE-2020-5555 · NVD
- FIRST EPSS
- GHSA-r4j8-gm27-2hj6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences