CVE-2020-12042

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access...

CVE-2020-12042

CVE-2020-12042 affects Opto 22 SoftPAC Project (version 9.6 and prior). The issue is that update ZIP paths are not sanitized, allowing an attacker with user privileges to gain arbitrary file write access with system access. Affected product: SoftPAC Project; root cause: unsanitized paths in firmw...