CVE-2021-32497

Summary of CVE-2021-32497 (SICK SOPAS ET) : Prior to version 4.8.0, SOPAS ET allows an attacker to wrap an arbitrary executable into an SDD and hand it to a user. When the SOPAS ET emulator is started, the embedded executable may run without further checks, enabling code execution under the local...

CVE-2021-32499

The CVE-2021-32499 issue affects SICK SOPAS ET before version 4.8.0. It allows an attacker to manipulate command line arguments to pass arbitrary values to the Emulator executable, effectively enabling command injection in the SOPAS ET toolset. Public exploitation information is not provided; the...

CVE-2021-32498

SICK SOPAS ET contains a path traversal vulnerability in versions prior to 4.8.0 that allows an attacker to manipulate the emulator’s pathname and cause an arbitrary host executable to be started when the emulator is launched from SOPAS ET. Affected product: SICK SOPAS ET; vulnerable component: e...