VYPR

SOPAS ET

by SICK AG

CVEs (3)

  • CVE-2021-32498HigDec 17, 2021
    risk 0.56cvss 8.6epss 0.01

    SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead…

  • CVE-2021-32497HigDec 17, 2021
    risk 0.56cvss 8.6epss 0.01

    SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further checks.

  • CVE-2021-32499HigDec 17, 2021
    risk 0.49cvss 7.5epss 0.01

    SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable.