Opto22
14 CVEs across 13 Opto22 products. Browse Opto22 vulnerabilities, severities, and proof-of-concept exploits.
Opto22 products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13087 | Medium | 6.2 | 2025-11-20 | A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a PO… |
CVE-2023-40710 | Medium | 6.8 | 2023-08-24 | An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests if the controller has the built-in web… |
CVE-2023-40709 | Medium | 6.8 | 2023-08-24 | An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-in web server enabled but does not have… |
CVE-2023-40708 | Medium | 5.8 | 2023-08-24 | The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files. |
CVE-2023-40707 | High | 8.6 | 2023-08-24 | There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version R10.3b, which could allow for a success… |
CVE-2023-40706 | High | 8.6 | 2023-08-24 | There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This could allow for a brute-force attack on t… |
CVE-2020-12046 | Medium | 5.7 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace l… |
CVE-2020-12042 | Medium | 6.5 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an atta… |
CVE-2020-10620 | Critical | 9.8 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly… |
CVE-2020-10616 | High | 8.8 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and e… |
CVE-2020-10612 | Critical | 9.1 | 2020-05-14 | Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any re… |
CVE-2015-1006 | Critical | 9.8 | 2019-05-10 | A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.4006, PAC Display Basic versions prior… |
CVE-2015-1007 | High | 7.8 | 2019-03-25 | A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution… |
CVE-2018-14807 | Critical | 9.8 | 2018-10-18 | A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution. |