Sopas Engineering Tool
CVE-2021-32497
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further checks.
AnalysisAI
SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity.
Technical ContextAI
SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further checks. Affected products include: Sick Sopas Engineering Tool. Version information: version 4.8.0.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Sopas Engineering Tool
View allSICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to
SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today