Skip to content
OpenAdvisories
Unscored CVE-2021-32498 EUVD-2021-19344GHSA-wprm-j8wf-78v5

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary e…

Published Dec 17, 2021 · Updated Aug 3, 2024 · Assigned by SICK AG

Description

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator

Affected products

VendorProductAffectedFixed
— SICK SOPAS ET all versions before 4.8.0 —

Advisories 1

References