exploitDog

CVE-2021-32498

Опубликовано: 17 дек. 2021

Источник: nvd

CVSS3: 8.6

CVSS2: 9.3

EPSS Низкий

Описание

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator

Ссылки

https://sick.com/psirt#advisories
Patch
Vendor Advisory
https://sick.com/psirt#advisories
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sick:sopas_engineering_tool:*:*:*:*:*:*:*:*

Версия до 4.8.0 (исключая)

EPSS

Процентиль: 34%

0.00133

Низкий

8.6 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-wprm-j8wf-78v5

github

около 4 лет назад

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator

EPSS

Процентиль: 34%

0.00133

Низкий

8.6 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-22