CVE-2020-10616 Other in Opto 22 SoftPAC Project
Attackers can execute arbitrary code by replacing unqualified DLL files loaded by Opto 22 SoftPAC during service startup.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-10616?
CVE-2020-10616 is a high-severity vulnerability in Opto 22 SoftPAC Project, published on 14 May 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.
Weakness: CWE-427
Which versions are affected by CVE-2020-10616?
It affects 1 product.
Products include Opto22 Softpac Project.
How do I fix CVE-2020-10616?
No fix has been published for CVE-2020-10616 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-10616 being exploited?
There is no known exploitation of CVE-2020-10616 in the wild and no public exploit code.
Other vulnerabilities in Opto 22 SoftPAC Project
Sources
Also known as GHSA-f2fx-qc7x-585h.