What is CVE-2021-32498?

CVE-2021-32498 is a high-severity vulnerability in Sick Sopas Engineering Tool, classified under Path Traversal. CVSS score: 8.6/10. Published 2021-12-17.

How severe is CVE-2021-32498?

High severity. CVSS v3 base score is 8.6 out of 10.

Path Traversal in Sick Sopas Engineering Tool

CVE-2021-32498

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Sick Sopas_engineering_tool
N/a Sick Sopas Et — versions all versions before 4.8.0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@sick.de (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-32498?: CVE-2021-32498 is a high-severity vulnerability in Sick Sopas Engineering Tool, classified under Path Traversal. CVSS score: 8.6/10. Published 2021-12-17.
How severe is CVE-2021-32498?: High severity. CVSS v3 base score is 8.6 out of 10.