Skip to content
OpenAdvisories
Critical ICSA-20-135-01 5 CVEs

Opto 22 SoftPAC Project

Published May 14, 2020 · Updated May 14, 2020

Vendor: Opto 22 Product: SoftPAC Project

Summary

Successful exploitation of these vulnerabilities could allow arbitrary file write access with system access, start or stop service, allow remote code execution, and limit system availability.

Vulnerabilities 5

  • Unscored —
    CVE-2020-10612

    Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. H…

  • Unscored —
    CVE-2020-10616

    Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. There…

  • Unscored —
    CVE-2020-10620

    Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an a…

  • Unscored —
    CVE-2020-12042

    Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware…

  • Unscored —
    CVE-2020-12046

    Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware upda…

Revision history

  1. #1

    ICSA-20-135-01 Opto 22 SoftPAC Project

References