Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-10620

EPSS 0.28% · P51
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-10620

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Opto 22 SoftPAC Project 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opto 22 SoftPAC Project是美国Opto 22公司的一套自动化软件套件。该产品能够提供工业自动化、过程控制、楼宇自动化、远程监控、数据采集和工业物联网等功能。 Opto 22 SoftPAC Project 9.6及之前版本中存在授权问题漏洞,该漏洞源于与SoftPAC进行通信时并不需要任何凭证。攻击者可利用该漏洞直接与SoftPAC通信,包括远程停止服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-Opto 22 SoftPAC Project SoftPAC Project Version 9.6 and prior -

II. Public POCs for CVE-2020-10620

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-10620

登录查看更多情报信息。

Same Patch Batch · n/a · 2020-05-14 · 47 CVEs total

CVE-2020-0093Android 缓冲区错误漏洞
CVE-2020-0065Android Suite Daemon 安全漏洞
CVE-2020-0100Android Media Framework 缓冲区错误漏洞
CVE-2020-12042Opto 22 SoftPAC Project 数据伪造问题漏洞
CVE-2020-120683S-Smart Software Solutions CODESYS Development System 安全漏洞
CVE-2020-12046Opto 22 SoftPAC Project 数据伪造问题漏洞
CVE-2020-10612Opto 22 SoftPAC Project 访问控制错误漏洞
CVE-2020-10616Opto 22 SoftPAC Project 代码问题漏洞
CVE-2020-0221Android Airbrush 缓冲区错误漏洞
CVE-2020-0091Android mnld组件信息泄露漏洞
CVE-2020-0090Android Email组件安全漏洞
CVE-2020-0106Android System 信息泄露漏洞
CVE-2020-0094Android Media Framework 缓冲区错误漏洞
CVE-2020-0110Android Kernel Scheduler 缓冲区错误漏洞
CVE-2020-0103Android System 缓冲区错误漏洞
CVE-2020-0109Android System 安全漏洞
CVE-2020-0097Android Framework 安全漏洞
CVE-2020-0096Android Framework 安全漏洞
CVE-2020-0092Android System 信息泄露漏洞
CVE-2020-0101Android Media Framework 信息泄露漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-10620

No comments yet


Leave a comment