CVE-2020-12042CWE-347

Opto 22 SoftPAC Project Version 9.6 and prior

published May 14, 2020

CVSS
—
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2020-05-14T20:28Z
EPSS history
Timeline
  • 14 MAY 20:28Z
    Opto 22 SoftPAC Project Version 9.6 and prior
    cvelistv5