VULNERABILITY INTELLIGENCE

CVE-2020-10616

CVSS score8.8 HIGH
EPSS probability1.75%
CISA KEVNot currently listed
Published2020-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-427
  • nvd@nist.gov: CWE-427

Primary references