CVE-2020-10616

High

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker…

icscert·CWE-427·Published 2020-05-14

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

199 chars

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.

NVDen

199 chars

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.

Opto 22 SoftPAC Project Versión 9.6 y anteriores. SoftPAC no especifica la ruta de varios archivos .dll importados. Por lo tanto, un atacante puede reemplazarlos y ejecutar código cada vez que el servicio se inicia.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H