Description
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Opto 22 SoftPAC Project | SoftPAC Project Version 9.6 and prior | — |
Advisories 1
- ICSA-20-135-01 Opto 22 SoftPAC Project CISA ICS & IT advisories · May 14, 2020