Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jmff-76g5-wgqf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting or stopping service, or writing to certain registry values.

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting or stopping service, or writing to certain registry values.

EPSS

Процентиль: 44%
0.00216
Низкий

Связанные уязвимости

CVSS3: 9.1
nvd
больше 5 лет назад

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting or stopping service, or writing to certain registry values.

EPSS

Процентиль: 44%
0.00216
Низкий