CVE-2020-10620
EUVD-2020-306814.05.2020, 21:15
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| opto22 | softpac_project | 𝑥 ≤ 9.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.