Vulnerability Details CVE-2020-14524
Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2020-14524
-
-
cpe:2.3:a:softing:opc:4.20.00
-
cpe:2.3:a:softing:opc:4.20.01
-
cpe:2.3:a:softing:opc:4.20.02
-
cpe:2.3:a:softing:opc:4.20.03
-
cpe:2.3:a:softing:opc:4.20.04
-
cpe:2.3:a:softing:opc:4.22.00
-
cpe:2.3:a:softing:opc:4.22.01
-
cpe:2.3:a:softing:opc:4.22.03
-
cpe:2.3:a:softing:opc:4.22.05
-
cpe:2.3:a:softing:opc:4.30.0
-
cpe:2.3:a:softing:opc:4.30.1
-
cpe:2.3:a:softing:opc:4.31.0
-
cpe:2.3:a:softing:opc:4.31.1
-
cpe:2.3:a:softing:opc:4.40.0
-
cpe:2.3:a:softing:opc:4.40.1
-
cpe:2.3:a:softing:opc:4.40.2
-
cpe:2.3:a:softing:opc:4.40.3
-
cpe:2.3:a:softing:opc:4.41.0
-
cpe:2.3:a:softing:opc:4.41.1
-
cpe:2.3:a:softing:opc:4.41.2
-
cpe:2.3:a:softing:opc:4.45.0
-
cpe:2.3:a:softing:opc:4.46.0