by Kastro
Paper/Archive/CVE-2020-10620

CVE-2020-10620

icscert — Opto 22 SoftPAC Project Version 9.6 and prior.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.5.685 × 2013.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely.

Affected

ProductAffectedFixed inSource
Opto 22 SoftPAC ProjectSoftPAC Project Version 9.6 and prior–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refus-cert.gov/ics/advisories/icsa-20-135-01