1. Home
  2. CVE Database
  3. CVE-2021-32498
HIGH · 8.6

CVE-2021-32498

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts th...

Vulnerability Description

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator

CVSS Score

8.6

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SickSopas Engineering Tool< 4.8.0

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2021-32498?

CVE-2021-32498 is a vulnerability with a CVSS score of 8.6 (HIGH). SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts th...

How severe is CVE-2021-32498?

CVE-2021-32498 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-32498?

Check the references section above for vendor advisories and patch information. Affected products include: Sick Sopas Engineering Tool.