← CVE Intelligence

CVE-2020-12042

n/a / Opto 22 SoftPAC Project PUBLISHED

Description (CNA)

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.

Affected (CNA)

Vendor / productVersions
n/a / Opto 22 SoftPAC Projectaffected SoftPAC Project Version 9.6 and prior

CWE

CWE-347

References

ADP enrichment

CVE

No English description supplied.