What is CVE-2020-10616?

CVE-2020-10616 is a high-severity vulnerability in Opto22 Softpac Project, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2020-05-14.

How severe is CVE-2020-10616?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Opto22 Softpac Project

CVE-2020-10616

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts.

EPSS: 0.017 (75.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Opto22 Softpac_project
N/a Opto 22 Softpac Project — versions SoftPAC Project Version 9.6 and prior

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-10616?: CVE-2020-10616 is a high-severity vulnerability in Opto22 Softpac Project, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2020-05-14.
How severe is CVE-2020-10616?: High severity. CVSS v3 base score is 8.8 out of 10.