VULNERABILITY INTELLIGENCE

CVE-2020-10620

CVSS score9.8 CRITICAL
EPSS probability1.21%
CISA KEVNot currently listed
Published2020-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-285
  • nvd@nist.gov: CWE-862

Primary references