CVE-2020-12046

2020-05-1420:30:55

CWE-347

icscert

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace legitimate firmware files with malicious files.

CNA Affected

[
  {
    "product": "Opto 22 SoftPAC Project",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "SoftPAC Project Version 9.6 and prior"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-20-135-01