CVE-2020-12042 - AskarLabs CVE Database

CVE-2020-12042

Vendor N/A

Product Opto 22 SoftPAC Project

Weakness CWE-347

Published May 14, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access.

Key dates

02Disclosure timeline

May 14, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-12042 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/347.html

Related vulnerabilities

04Related CVE

CVE-2022-3864 CVE-2024-27247 Zoom Desktop Client for macOS - Improper Privilege Management CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection CVE-2024-47943 Improper signature verification of firmware upgrade files CVE-2023-42811 AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure